Removed rpms
============

 - mozilla-nss-certs

Added rpms
==========

 - p11-kit-nss-trust

Package Source Changes
======================

expat
+  * (CVE-2022-43680, bsc#1204708) use-after free caused by overeager
+    destruction of a shared DTD in XML_ExternalEntityParserCreate in
+    out-of-memory situations
+  - Added patch expat-CVE-2022-43680.patch
+
+- Security fix:
gnutls
+- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
+  * Fixes a SIGILL termination at the verzoupper instruction when
+    trying to run GnuTLS on a Linux kernel with the noxsave command
+    line parameter set. Relevant mostly for virutal systems.
+  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
+  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch
+
kernel-firmware
-- Fix missing aliases for qlogic (bsc#1200889);
-  update other aliases as well from the latest SLE15-SP4 kernels
+- Update to version 20221031 (git commit 8bb75626e9dd):
+  * linux-firmware: Add firmware for Cirrus CS35L41 on new ASUS Laptop
+  * iwlwifi: add new PNVM binaries from core74-44 release
+  * iwlwifi: add new FWs from core69-81 release
+  * qcom: update venus firmware files for VPU-2.0
+  * qcom: remove split SC7280 venus firmware images
+  * qcom: update venus firmware file for v5.4
+  * qcom: replace split SC7180 venus firmware images with symlink
+  * rtw89: 8852b: update fw to v0.27.32.1
+  * rtlwifi: update firmware for rtl8192eu to v35.7
+  * rtlwifi: Add firmware v4.0 for RTL8188FU
+  * i915: Add HuC 7.10.3 for DG2
+  * linux-firmware: Add firmware for Cirrus CS35L41 on ASUS Laptops
+  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops
+  * linux-firmware: Add firmware for Cirrus CS35L41 on HP Laptops
+- Drop the CS35L41 firmware tarball that has been merged
+- Drop obsoleted cirrus-WHENCE-update.patch
+
+- Update to version 20221017 (git commit 48407ffd7adb):
+  * cnm: update chips&media wave521c firmware.
+  * brcm: add symlink for Pi Zero 2 W NVRAM file
+  * rtw89: 8852b: add initial fw v0.27.32.0
+  * iwlwifi: add new FWs from core72-129 release
+  * iwlwifi: update 9000-family firmwares to core72-129
+  * rtl_bt: Update RTL8852C BT USB firmware to 0xD5B8_A40A
+  * amdgpu: update GC 10.3.6 RLC firmware
+  * amdgpu: update GC 10.3.7 RLC firmware
+  * amdgpu: update Yellow Carp RLC firmware
+  * amdgpu: update Beige Goby RLC firmware
+  * amdgpu: update Dimgrey Cavefish RLC firmware
+  * amdgpu: update Navy Flounder RLC firmware
+  * amdgpu: update Sienna Cichlid RLC firmware
+  * mediatek: Update mt8195 SOF firmware to v0.4.1
+  * qcom: add squashed version of a530 zap shader
+  * rtw89: 8852c: update fw to v0.27.56.1
+  * rtw89: 8852c: update fw to v0.27.56.0
+  * mediatek: Update mt8186 SCP firmware
+- Update Cirrus CS35L41 firmware (bsc#1203699)
+  cirrus-WHENCE-update.patch
+- Update aliases from 6.1-rc1 kernel
+
+- Apply the same workaround to uncompressed flat package, too
+  (bsc#1204103)
+
+- Workaround for update failure of kernel-firmware-qcom package
+  due to the change from a directory to a symlink (bsc#1204103)
+
+- Update to version 20220930 (git commit fdf1a6525852):
+  * linux-firmware: Update AMD cpu microcode
+  * mediatek: mt8195: Update scp.img to v2.0.11956
+  * mediatek: Add new mt8195 SOF firmware
+  * mediatek: Update mt8186 SOF firmware to v0.2.1
+  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
+  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9B8_8207
+  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
+  * linux-firmware: update firmware for MT7922 WiFi device
+  * linux-firmware: update firmware for MT7921 WiFi device
+  * cxgb4: Update firmware to revision 1.27.0.0 (jsc#PED-1501)
+  * i915: Add versionless HuC files for current platforms
+  * i915: Add GuC v70.5.1 for DG1, DG2, TGL and ADL-P
+  * qca: Update firmware files for BT chip WCN3991.
+  * Removing crnv32
+  * amdgpu: update yellow carp DMCUB firmware
+  * amdgpu: add firmware for VCN 3.1.2 IP block
+  * amdgpu: add firmware for SDMA 5.2.6 IP block
+  * amdgpu: add firmware for PSP 13.0.5 IP block
+  * amdgpu: add firmware for GC 10.3.6 IP block
+  * amdgpu: add firmware for DCN 3.1.5 IP block
+  * qcom: rename Lenovo ThinkPad X13s firmware paths
+  * rtw89: 8852c: update fw to v0.27.42.0
+  * rtw89: 8852c: update fw to v0.27.36.0
+- Fix install-split.sh for dealing with a symlink of directory
+
+- Update to version 20220902 (git commit 2f2f0181581d):
+  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.3146
+  * amdgpu: update beige goby VCN firmware
+  * amdgpu: update dimgrey cavefish VCN firmware
+  * amdgpu: update navy flounder VCN firmware
+  * amdgpu: update sienna cichlid VCN firmware (bsc#1202707)
+  * rtl_bt: Update RTL8852C BT USB firmware to 0xDFB8_5A33
+  * mediatek: reference the LICENCE file for MediaTek firmwares
+  * mediatek: Add new mt8186 SOF firmware
+  * ice: Update package to 1.3.30.0
+  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00438
+  * brcm: Add nvram for Lenovo Yoga Tablet 2 830F/L and 1050F/L tablets
+  * brcm: Add nvram for the Xiaomi Mi Pad 2 tablet
+  * brcm: Add nvram for the Asus TF103C tablet
+  * Add amd-ucode README file
+  * qca: Update firmware files for BT chip WCN6750.      This commit will update required firmware files for WCN6750.
+  * amdgpu: Update Yellow Carp VCN firmware
+  * qcom: Add firmware for Lenovo ThinkPad X13s
+- Update aliases from 6.0-rc
+- Update topics list for mtk-sof
+
+- Update to version 20220804 (git commit e6185d5197fd):
+  * linux-firmware: Update firmware file for Intel Bluetooth 9462
+  * linux-firmware: Update firmware file for Intel Bluetooth 9462
+  * linux-firmware: Update firmware file for Intel Bluetooth 9560
+  * linux-firmware: Update firmware file for Intel Bluetooth 9560
+  * linux-firmware: Update firmware file for Intel Bluetooth AX201
+  * linux-firmware: Update firmware file for Intel Bluetooth AX201
+  * linux-firmware: Update firmware file for Intel Bluetooth AX211
+  * linux-firmware: Update firmware file for Intel Bluetooth AX211
+  * linux-firmware: Update firmware file for Intel Bluetooth AX210
+  * linux-firmware: Update firmware file for Intel Bluetooth AX200
+  * linux-firmware: Update firmware file for Intel Bluetooth AX201
+  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.3020
+  * linux-firmware: Add firmware for Cirrus CS35L41
+  * i915: Add GuC v70.4.1 for DG2
+  * i915: Add DMC v2.07 for DG2
+  * amdgpu partially revert "amdgpu: update beige goby to release 22.20"
+  * mediatek: Update mt8183/mt8192/mt8195 SCP firmware
+  * amdgpu: update renoir to release 22.20
+  * amdgpu: update beige goby to release 22.20
+  * amdgpu: update yellow carp to release 22.20
+  * amdgpu: update dimgrey cavefish to release 22.20
+  * amdgpu: update vega20 to release 22.20
+  * amdgpu: update vega12 to release 22.20
+  * amdgpu: update raven to release 22.20
+  * amdgpu: update navy flounder to release 22.20
+  * amdgpu: update vega10 to release 22.20
+  * amdgpu: update sienna cichlid to release 22.20
+  * amdgpu: update navi14 to release 22.20
+  * amdgpu: update green sardine to release 22.20
+  * amdgpu: update vangogh to release 22.20
+  * amdgpu: update navi12 to release 22.20
+  * amdgpu: update navi10 to release 22.20
+  * amdgpu: update picasso to release 22.20
+  * amdgpu: update aldebaran to release 22.20
+  * amdgpu: update psp 13.0.8 TA firmware
+  * WHENCE: Fix the dangling symlinks fix
+- Revert the previous rtw88/rtw8822c_fw.bin change due to regression
+  on HP Pavilion 15 (bsc#1202152)
+- Update alias from 5.19
+
+- Update to version 20220714 (git commit 84661a3ba62f):
+  * amdgpu: update DMCUB firmware for DCN 3.1.6
+  * WHENCE: Correct dangling symlinks
+  * Correct WHENCE entry for wfx firmware
+  * bnx2: Drop unsupported Broadcom NetXtremeII firmware
+  * bnx2: drop unsupported firmwares
+  * bnx2: sort firmware names in filesystem order
+  * Remove old Broadcom Everest (bnx2x) v4/5 firmware
+  * drop Token Ring network firmwares
+  * Drop TDA7706 radio firmware
+  * Drop Intel WiMax firmware
+  * Drop Computone IntelliPort Plus serial firmware
+  * Drop ATM Ambassador devices firmware
+  * brocade: drop old unsupported firmware revs
+  * amdgpu: update yellow carp DMCUB firmware
+  * linux-firmware: update firmware for MT7622 WiFi device
+  * linux-firmware: update firmware for MT7922 WiFi device
+  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
+  * linux-firmware: Update firmware file for Intel Bluetooth 9462
+  * linux-firmware: Update firmware file for Intel Bluetooth 9462
+  * linux-firmware: Update firmware file for Intel Bluetooth 9560
+  * linux-firmware: Update firmware file for Intel Bluetooth 9560
+  * linux-firmware: Update firmware file for Intel Bluetooth AX201
+  * linux-firmware: Update firmware file for Intel Bluetooth AX201
+  * linux-firmware: Update firmware file for Intel Bluetooth AX211
+  * linux-firmware: Update firmware file for Intel Bluetooth AX211
+  * linux-firmware: Update firmware file for Intel Bluetooth AX210
+  * linux-firmware: Update firmware file for Intel Bluetooth AX200
+  * linux-firmware: Update firmware file for Intel Bluetooth AX201
+  * mediatek: Add SCP firmware for MT8186
+  * rtw88: 8822c: Update normal firmware to v9.9.13
+  * rtw88: 8822c: Update normal firmware to v9.9.12
+- Drop obsoleted temporary patches:
+  wfx-WHENCE-fix.diff
+  brcm-symlink-fixes.diff
+- Minor update of README.build
+- Fix missing aliases for qlogic (bsc#1200889)
+
+- Update to version 20220622 (git commit 9ed4d42c51ac):
+  * amdgpu: update Yellow Carp VCN firmware
+  * linux-firmware: update firmware for MT7921 WiFi device
+  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
+  * qed: update 8.59.1.0 firmware
+  * Link some devices that ship with the AW-CM256SM
+  * Add initial AzureWave AW-CM256SM NVRAM file
+  * Remove the Pine64 Quartz copy of the RPi NVRAM
+  * qca: Update firmware files for BT chip WCN6750.
+  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00409
+  * WHENCE: add symlinks for StarFive based boards
+  * linux-firmware: wilc1000: update WILC1000 firmware to v15.6
+  * brcm: Add NVRAM file 43455 based Wifi/BT module as used on the Quartz64 Model B from Pine64. This file is based on the existing "brcm/brcmfmac43455-sdio.raspberrypi,4-model-b.txt" NVRAM file.
+  * iwlwifi: add new FWs from core70-87 release
+  * iwlwifi: update 9000-family firmwares to core70-87
+- Temporary fix for incorrect symlinks for brcm in WHENCE:
+  brcm-symlink-fixes.diff
+- Minor updates of scripts, sorting alphabetically and add version
+  to Provides/Obsoletes
+- Update alias
+
+- Update to version 20220607 (git commit 02c69863c885):
+  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB8_0634
+  * Makefile: replace mkdir by install
+  * iwlwifi: remove old unsupported 3160/7260/7265/8000/8265 firmware
+  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.9
+  * WHENCE: ath11k: move regdb.bin before board-2.bin
+  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00157
+  * ath10k: QCA9888 hw2.0: update board-2.bin
+  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00157
+  * ath10k: QCA4019 hw1.0: update board-2.bin
+  * ath10k: WCN3990 hw1.0: add board-2.bin
+- Update aliases from 5.19-rc1
+- Minor adjustment of spec template and makespec.sh to align with
+  the latest TW format
+
+- Update to version 20220516 (git commit 251d29004ffc):
+  * amdgpu: update beige goby firmware for 22.10
+  * amdgpu: update renoir firmware for 22.10
+  * amdgpu: update dimgrey cavefish firmware for 22.10
+  * amdgpu: update vega20 firmware for 22.10
+  * amdgpu: update yellow carp firmware for 22.10
+  * amdgpu: update vega12 firmware for 22.10
+  * amdgpu: update navy flounder firmware for 22.10
+  * amdgpu: update vega10 firmware for 22.10
+  * amdgpu: update raven2 firmware for 22.10
+  * amdgpu: update raven firmware for 22.10
+  * amdgpu: update sienna cichlid firmware for 22.10
+  * amdgpu: update green sardine firmware for 22.10
+  * amdgpu: update PCO firmware for 22.10
+  * amdgpu: update vangogh firmware for 22.10
+  * amdgpu: update navi14 firmware for 22.10
+  * amdgpu: update navi12 firmware for 22.10
+  * amdgpu: update navi10 firmware for 22.10
+  * amdgpu: update aldebaran firmware for 22.10
+  * linux-firmware: Update firmware file for Intel Bluetooth 9462
+  * linux-firmware: Update firmware file for Intel Bluetooth 9462
+  * linux-firmware: Update firmware file for Intel Bluetooth 9560
+  * linux-firmware: Update firmware file for Intel Bluetooth 9560
+  * linux-firmware: Update firmware file for Intel Bluetooth AX201
+  * linux-firmware: Update firmware file for Intel Bluetooth AX201
+  * linux-firmware: Update firmware file for Intel Bluetooth AX211
+  * linux-firmware: Update firmware file for Intel Bluetooth AX211
+  * linux-firmware: Update firmware file for Intel Bluetooth AX210
+  * linux-firmware: Update firmware file for Intel Bluetooth AX200
+  * linux-firmware: Update firmware file for Intel Bluetooth AX201
+  * mediatek: Update mt8192 SCP firmware
libarchive
+- Fix CVE-2021-31566, modifies file flags of symlink target
+  (CVE-2021-31566, bsc#1192426.patch)
+  CVE-2021-31566.patch
+- Fix bsc#1192427, processing fixup entries may follow symbolic links
+  bsc1192427.patch
+
libyui
+- Prevent antisocial focus grabbing in pkg list (bsc#1204429)
+- 4.4.6
+
+- Fixed build failure with gcc 13 (gh#libyui/libyui/#80)
+- Killed YCP zombies in log output and comments
+- 4.4.5
+
libyui:libyui-ncurses
+- Prevent antisocial focus grabbing in pkg list (bsc#1204429)
+- 4.4.6
+
+- Fixed build failure with gcc 13 (gh#libyui/libyui/#80)
+- Killed YCP zombies in log output and comments
+- 4.4.5
+
libyui:libyui-ncurses-pkg
+- Prevent antisocial focus grabbing in pkg list (bsc#1204429)
+- 4.4.6
+
+- Fixed build failure with gcc 13 (gh#libyui/libyui/#80)
+- Killed YCP zombies in log output and comments
+- 4.4.5
+
libyui:libyui-qt
+- Prevent antisocial focus grabbing in pkg list (bsc#1204429)
+- 4.4.6
+
+- Fixed build failure with gcc 13 (gh#libyui/libyui/#80)
+- Killed YCP zombies in log output and comments
+- 4.4.5
+
libyui:libyui-qt-graph
+- Prevent antisocial focus grabbing in pkg list (bsc#1204429)
+- 4.4.6
+
+- Fixed build failure with gcc 13 (gh#libyui/libyui/#80)
+- Killed YCP zombies in log output and comments
+- 4.4.5
+
libyui:libyui-qt-pkg
+- Prevent antisocial focus grabbing in pkg list (bsc#1204429)
+- 4.4.6
+
+- Fixed build failure with gcc 13 (gh#libyui/libyui/#80)
+- Killed YCP zombies in log output and comments
+- 4.4.5
+
mozilla-nspr
+- update to version 4.34.1
+  * add file descriptor sanity checks in the NSPR poll function.
+
openssh
+- Add openssh-do-not-send-empty-message.patch: Prevent empty
+  messages from being sent. This avoids a superfluous new line
+  (bsc#1192439).
+
openssl-1_1
+- FIPS: Add a missing dependency on jitterentropy-devel for
+  libopenssl-1_1-devel [bsc#1202148]
+
+- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
+  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch
+
pam
+- Update pam_motd to the most current version. This fixes various issues
+  and adds support for mot.d directories [jsc#PED-1712].
+  * Added: pam-ped1712-pam_motd-directory-feature.patch
+
protobuf
+- Fix a potential DoS issue in protobuf-cpp and protobuf-python,
+  CVE-2022-1941, bsc#1203681
+  * Add protobuf-CVE-2022-1941.patch
+- Fix a potential DoS issue when parsing with binary data in
+  protobuf-java, CVE-2022-3171, bsc#1204256
+  * Add protobuf-CVE-2022-3171.patch
+- Refresh protobuf-CVE-2021-22570.patch
+- Backport changes from 3.16.x tree for apply recent CVE patches
+  * Add protobuf-51026d922970e06475f005b39287963594134b96.patch
+  * Add protobuf-6ee16a9c60e734104aeb738503fe3f411c97bd88.patch
+  * Add protobuf-73e0d748b9acdc40b693f2879ce82ecb1a849b81.patch
+  * Add protobuf-7bff8393cab939bfbb9b5c69b3fe76b4d83c41ee.patch
+  * Add protobuf-4f02f056b5cea99052bfdfb6698afe47a3cf2964.patch
+  * Add protobuf-763c3588740b97e8e80b1b1a1a2dc4f417647133.patch
+  * Add protobuf-6c92f9dff1807c142edf6780d775b58a3b078591.patch
+  * Add protobuf-4e93585e8bb234efeacb7737b8d080968c5ab91e.patch
+  * Add protobuf-58d4420e2dd8a3cd354fff9db0052881c25369ce.patch
+- Reorganize patch set ordering
+
+- Fix potential Denial of Service in protobuf-java in the parsing procedure
+  for binary data, CVE-2021-22569, bsc#1194530
+  * Add protobuf-improve-performance-of-parsing-unknown-fields-in-Java.patch
+
transactional-update
+- Version 4.1.0
+  - t-u: Add a "setup-kdump" command; implements [jsc#PED-1441]
+  - Export TRANSACTIONAL_UPDATE_ROOT (the path to the snapshot) in
+    the update environment; implements [jsc#PED-1078]
+  - Add support for "notify" reboot method for desktop use
+    [gh#openSUSE/transactional-update#93]
+  - Fix kdump initrd recreation detection; the check was performed in the
+    active snapshot instead of the target snapshot
+  - Document register command [bsc#1202900]
+  - Avoid unnecessary snapshots for register command [bsc#1202901]
+  - Various optimizations for register command
+  - Remove bogus error message when triggering reboot
+  - Rework /etc overlay documentation in "The Transactional Update Guide"
+  - Fix incorrect manpage formatting
+  - Remove leftover "salt" reboot method in configuration example file
+  - Replace deprecated std::mem_fn with lambdas
+
+- Migration of logrotate configuration to /usr/etc: Saving user
+  changed configuration files in /etc and restoring them while
+  an RPM update.
+
yast2
+- Fix hash vs keyword arguments in RSpec expectations (bsc#1204871)
+- 4.5.19
+
yast2-configuration-management
+- Fix hash vs keyword arguments in RSpec expectations (bsc#1204871)
+- 4.5.1
+
yast2-packager
+- Do not add an empty repository to the system when upgrading
+  a registered system using the Full installation medium
+  (bsc#1204399)
+- 4.5.8
+
+- Fix hash vs keyword arguments in RSpec expectations (bsc#1204871)
+- 4.5.7
+
yast2-samba-client
+- Enable pam_mount also for gdm-password service; (bsc#1204830);
+- 4.5.2
+
yast2-security
+- Fix hash vs keyword arguments in RSpec expectations (bsc#1204871)
+- 4.5.2
+