Packages changed:
  audit-secondary
  bash
  bluez (5.63 -> 5.64)
  dnf (4.10.0 -> 4.11.1)
  file
  inih (53 -> 55)
  iproute2 (5.16 -> 5.17)
  kernel-source (5.16.15 -> 5.17.1)
  libdnf (0.65.0 -> 0.66.0)
  mozilla-nss
  python-MarkupSafe (2.0.1 -> 2.1.1)
  python-alembic (1.7.6 -> 1.7.7)
  python-cryptography (36.0.1 -> 36.0.2)
  rbac-lookup (0.7.1 -> 0.8.3)
  wireless-regdb (20220218 -> 20220324)

=== Details ===

==== audit-secondary ====
Subpackages: audit python3-audit system-group-audit

- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package
- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch
- add audit-userspace-517-compat.patch

==== bash ====
Subpackages: bash-sh

- Do use old legacy PreReq to get bash installed before bash-sh
  but do not require bash-sh by bash (bsc#1197448)

==== bluez ====
Version update (5.63 -> 5.64)

- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (< 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch

==== dnf ====
Version update (4.10.0 -> 4.11.1)

- Update to 4.11.1
  + Allow destdir option with modulesync command
  + Add documentation for query api flags (rh#2035577)
  + Fix swap command to work with local rpm files correctly (rh#2036434)
  + Fix regression in verifying signatures using rpmkeys
  + Use rpm.TransactionSet.dbCookie() to determining if rpmdb has changed (rh#2043476)
  + Fix decompression of groups.xml (rh#2030255)
  + Fix history undo on a Reason Change (rh#2010259, rh#2053014)
  + Remove /usr/bin from sys.path to avoid accidentally importing garbage
  + Fix: Python dnf API does not respect cacheonly (rh#1862970)
  + Fix python3.11 build: remove deprecated, update traceback regex
  + fix dnf mark error when history sqlite missing
  + [doc] Improve description of multilib_policy=all (rh#1996681, rh#1995630)
  + [doc] clarify effect of --enablerepo and --disablerepo options (rh#2031414)
  + [doc] default values for module_obsoletes and module_stream_switch (rh#2051846)
- Add Fix-processing-of-download-errors.patch backported from upstream
  * Fix dnf incorrectly aborting on non-English systems when packages already cached (rh#2024527)

==== file ====
Subpackages: file-magic libmagic1

- add file-5.41-cache-regexps-locale-restore.patch to restore
  previous locale handling behavior
- add file-5.41-cache-regexps.patch to cache regexp lookups

==== inih ====
Version update (53 -> 55)

- Update to version 55
  * Include proper version in installed pkgconfig files.
- Update to version 54
  * Improve quality of shared objects by explicitly defining symbol
    visibility.

==== iproute2 ====
Version update (5.16 -> 5.17)

- update to 5.17:
  * lib/fs: fix memory leak in get_task_name()
  * bridge: Remove vlan listing from `bridge link`
  * bond: add arp_missed_max option
  * libnetlink: fix socket leak in rtnl_open_byproto()
  * dcb: Fix error reporting when accessing "dcb app"
  * tc_util: Fix parsing action control with space and slash
  * lib: fix ax25.h include for musl
  * uapi: add missing rose and ax25 files
  * rdma: Fix res_print_uint() and add res_print_u64()
  * tc: Add support for ce_threshold_value/mask in fq_codel
- Add tmpfiles.d conf for /run/netns

==== kernel-source ====
Version update (5.16.15 -> 5.17.1)

- Revert "config: Enable BPF LSM" (bsc#1197746)
  This reverts commit c2c25b18721866d6211054f542987036ed6e0a50.
- commit 58205bc
- Revert "swiotlb: rework "fix info leak with DMA_FROM_DEVICE""
  (bsc#1197460).
- commit ffd9dce
- block: restore the old set_task_ioprio() behaviour wrt
  PF_EXITING (bsc#1197582).
- commit c349fed
- Linux 5.17.1 (bsc#1012628).
- llc: only change llc->dev when bind() succeeds (bsc#1012628).
- drm/msm/gpu: Fix crash on devices without devfreq support (v2)
  (bsc#1012628).
- nds32: fix access_ok() checks in get/put_user (bsc#1012628).
- m68k: fix access_ok for coldfire (bsc#1012628).
- wcn36xx: Differentiate wcn3660 from wcn3620 (bsc#1012628).
- tpm: use try_get_ops() in tpm-space.c (bsc#1012628).
- tpm: fix reference counting for struct tpm_chip (bsc#1012628).
- mac80211: fix potential double free on mesh join (bsc#1012628).
- uaccess: fix integer overflow on access_ok() (bsc#1012628).
- rcu: Don't deboost before reporting expedited quiescent state
  (bsc#1012628).
- jbd2: fix use-after-free of transaction_t race (bsc#1012628).
- drm/virtio: Ensure that objs is not NULL in
  virtio_gpu_array_put_free() (bsc#1012628).
- Revert "ath: add support for special 0x0 regulatory domain"
  (bsc#1012628).
- Bluetooth: btusb: Use quirk to skip HCI_FLT_CLEAR_ALL on fake
  CSR controllers (bsc#1012628).
- Bluetooth: hci_sync: Add a new quirk to skip HCI_FLT_CLEAR_ALL
  (bsc#1012628).
- Bluetooth: btusb: Add one more Bluetooth part for the Realtek
  RTL8852AE (bsc#1012628).
- crypto: qat - disable registration of algorithms (bsc#1012628).
- ACPI: video: Force backlight native for Clevo NL5xRU and NL5xNU
  (bsc#1012628).
- ACPI: battery: Add device HID and quirk for Microsoft Surface
  Go 3 (bsc#1012628).
- ACPI / x86: Work around broken XSDT on Advantech DAC-BJ01 board
  (bsc#1012628).
- netfilter: nf_tables: validate registers coming from userspace
  (bsc#1012628).
- netfilter: nf_tables: initialize registers in nft_do_chain()
  (bsc#1012628).
- drivers: net: xgene: Fix regression in CRC stripping
  (bsc#1012628).
- ALSA: pci: fix reading of swapped values from pcmreg in AC97
  codec (bsc#1012628).
- ALSA: cmipci: Restore aux vol on suspend/resume (bsc#1012628).
- ALSA: usb-audio: Add mute TLV for playback volumes on RODE
  NT-USB (bsc#1012628).
- ALSA: pcm: Add stream lock during PCM reset ioctl operations
  (bsc#1012628).
- ALSA: pcm: Fix races among concurrent prealloc proc writes
  (bsc#1012628).
- ALSA: pcm: Fix races among concurrent prepare and
  hw_params/hw_free calls (bsc#1012628).
- ALSA: pcm: Fix races among concurrent read/write and buffer
  changes (bsc#1012628).
- ALSA: pcm: Fix races among concurrent hw_params and hw_free
  calls (bsc#1012628).
- ALSA: hda/realtek: Add quirk for ASUS GA402 (bsc#1012628).
- ALSA: hda/realtek - Fix headset mic problem for a HP machine
  with alc671 (bsc#1012628).
- ALSA: hda/realtek: Add quirk for Clevo NP50PNJ (bsc#1012628).
- ALSA: hda/realtek: Add quirk for Clevo NP70PNJ (bsc#1012628).
- ALSA: usb-audio: add mapping for new Corsair Virtuoso SE
  (bsc#1012628).
- ALSA: oss: Fix PCM OSS buffer allocation overflow (bsc#1012628).
- ASoC: sti: Fix deadlock via snd_pcm_stop_xrun() call
  (bsc#1012628).
- llc: fix netdevice reference leaks in llc_ui_bind()
  (bsc#1012628).
- Bluetooth: btusb: Add another Realtek 8761BU (bsc#1012628).
- tpm: Fix error handling in async work (bsc#1012628).
- commit e830013
- series.conf: cleanup
- update mainline references and move into sorted section:
  - patches.suse/Bluetooth-btusb-Add-missing-Chicony-device-for-Realt.patch
  - patches.suse/bpf-add-config-to-allow-loading-modules-with-BTF-mis.patch
- commit 62d2682
- Revert "Input: clear BTN_RIGHT/MIDDLE on buttonpads"
  (bsc#1197243).
- commit 7257225
- Drop HID multitouch fix patch (bsc#1197243)
  Delete patches.suse/HID-multitouch-fix-Dell-Precision-7550-and-7750-butt.patch.
  Replaced with another revert patch.
- commit 01821ca
- rpm/constraints.in: skip SLOW_DISK workers for kernel-source
- commit e84694f
- Revert "rpm/macros.kernel-source: avoid %if's and %define's"
  This reverts commit d0cec50d019c853336e26f5ff5df5a4c9c3ea120.
- commit b20736a
- macros.kernel-source: Fix conditional expansion.
  Fixes: bb95fef3cf19 ("rpm: Use bash for %() expansion (jsc#SLE-18234).")
- commit 7e857f7
- rpm/macros.kernel-source: avoid %if's and %define's
  It's not supported in rpm macros scripts. So for now, resolve
  %kernel_build_shell_package to bash-sh in stable branch unconditionally.
  When this is fixed in the packaging branch, revert this.
- commit d0cec50
- Refresh
  patches.suse/Bluetooth-btusb-Add-missing-Chicony-device-for-Realt.patch.
  Update upstream status.
- commit 36a1351
- Update to 5.17 final
- refresh configs (headers only)
- commit be2cbd1
- rpm: Use bash for %() expansion (jsc#SLE-18234).
  Since 15.4 alternatives for /bin/sh are provided by packages
  <something>-sh. While the interpreter for the build script can be
  selected the interpreter for %() cannot.
  The kernel spec files use bashisms in %().
  While this could technically be fixed there is more serious underlying
  problem: neither bash nor any of the alternatives are 100% POSIX
  compliant nor bug-free.
  It is not my intent to maintain bug compatibility with any number of
  shells for shell scripts embedded in the kernel spec file. The spec file
  syntax is not documented so embedding the shell script in it causes some
  unspecified transformation to be applied to it. That means that
  ultimately any changes must be tested by building the kernel, n times if
  n shells are supported.
  To reduce maintenance effort require that bash is used for kernel build
  always.
- commit bb95fef
- Linux 5.16.16 (bsc#1012628).
- ice: Fix race condition during interface enslave (bsc#1012628).
- kselftest/vm: fix tests build with old libc (bsc#1012628).
- bnx2: Fix an error message (bsc#1012628).
- sfc: extend the locking on mcdi->seqno (bsc#1012628).
- tcp: make tcp_read_sock() more robust (bsc#1012628).
- nl80211: Update bss channel on channel switch for P2P_CLIENT
  (bsc#1012628).
- drm/vrr: Set VRR capable prop only if it is attached to
  connector (bsc#1012628).
- iwlwifi: don't advertise TWT support (bsc#1012628).
- Input: goodix - workaround Cherry Trail devices with a bogus
  ACPI Interrupt() resource (bsc#1012628).
- Input: goodix - use the new soc_intel_is_byt() helper
  (bsc#1012628).
- netfilter: egress: silence egress hook lockdep splats
  (bsc#1012628).
- atm: firestream: check the return value of ioremap() in
  fs_init() (bsc#1012628).
- can: rcar_canfd: rcar_canfd_channel_probe(): register the CAN
  device when fully ready (bsc#1012628).
- Bluetooth: hci_core: Fix leaking sent_cmd skb (bsc#1012628).
- ARM: 9178/1: fix unmet dependency on BITREVERSE for
  HAVE_ARCH_BITREVERSE (bsc#1012628).
- MIPS: smp: fill in sibling and core maps earlier (bsc#1012628).
- mac80211: refuse aggregations sessions before authorized
  (bsc#1012628).
- ARM: dts: rockchip: fix a typo on rk3288 crypto-controller
  (bsc#1012628).
- ARM: dts: rockchip: reorder rk322x hmdi clocks (bsc#1012628).
- arm64: dts: agilex: use the compatible
  "intel,socfpga-agilex-hsotg" (bsc#1012628).
- arm64: dts: rockchip: reorder rk3399 hdmi clocks (bsc#1012628).
- arm64: dts: rockchip: align pl330 node name with dtschema
  (bsc#1012628).
- arm64: dts: rockchip: fix rk3399-puma eMMC HS400 signal
  integrity (bsc#1012628).
- xfrm: Fix xfrm migrate issues when address family changes
  (bsc#1012628).
- xfrm: Check if_id in xfrm_migrate (bsc#1012628).
- arm64: dts: rockchip: fix rk3399-puma-haikou USB OTG mode
  (bsc#1012628).
- arm64: dts: rockchip: fix dma-controller node names on rk356x
  (bsc#1012628).
- Revert "xfrm: state and policy should fail if XFRMA_IF_ID 0"
  (bsc#1012628).
- commit d9656de
- HID: multitouch: fix Dell Precision 7550 and 7750 button type
  (bsc#1197243).
- commit 5500e44
- Disable 5.16.10-026-NFSv4.1-query-for-fs_location-attr-on-a-new-f.patch (boo#1196521)
  This patch causes a regression and probably should not have been
  backported to stable anyway.  Disable it.
  Links to upstream discussions in the bug.
- commit 40a4b1d

==== libdnf ====
Version update (0.65.0 -> 0.66.0)
Subpackages: libdnf-repo-config-zypp libdnf2

- Update to 0.66.0
  + Use `rpmdbCookie` from librpm, remove `hawkey.Sack._rpmdb_version`
  + Fix handling transaction id in resolveTransactionItemReason (rh#2010259, rh#2053014)
  + Remove deprecated assertions (rh#2027383)
  + Increase required rpm version since we use `rpmdbCookie()`
  + Skip rich deps for autodetection of unmet dependencies (rh#2033130)
- Use ldconfig_scriptlets macro for ldconfig scriptlets

==== mozilla-nss ====
Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs

- Add nss-util pkgconfig and config files (copied from RH/Fedora)

==== python-MarkupSafe ====
Version update (2.0.1 -> 2.1.1)

- specfile:
  * update copyright year
  * require python >= 3.7
- update to version 2.1.1:
  * Avoid ambiguous regex matches in "striptags". :pr:`293`
- changes from version 2.1.0:
  * Drop support for Python 3.6. :pr:`262`
  * Remove "soft_unicode", which was previously deprecated. Use
    "soft_str" instead. :pr:`261`
  * Raise error on missing single placeholder during string
    interpolation. :issue:`225`
  * Disable speedups module for GraalPython. :issue:`277`

==== python-alembic ====
Version update (1.7.6 -> 1.7.7)

- update to 1.7.7:
  * Fixed issue where using :meth:`.Operations.create_table` in conjunction
    with a :class:`.CheckConstraint` that referred to table-bound
    :class:`.Column` objects rather than string expressions would be added to
    the parent table potentially multiple times, resulting in an incorrect DDL
    sequence. Pull request courtesy Nicolas CANIART.
  * The ``logging.fileConfig()`` line in ``env.py`` templates, which is used
    to setup Python logging for the migration run, is now conditional on
    :attr:`.Config.config_file_name` not being ``None``.  Otherwise, the line
    is skipped as there is no default logging configuration present.
  * Fixed bug where an :meth:`.Operations.alter_column` operation would change
    a "NOT NULL" column to "NULL" by emitting an ALTER COLUMN statement that
    did not specify "NOT NULL". (In the absence of "NOT NULL" T-SQL was
    implicitly assuming "NULL"). An :meth:`.Operations.alter_column` operation
    that specifies :paramref:`.Operations.alter_column.type` should also
    specify include either :paramref:`.Operations.alter_column.nullable` or
    :paramref:`.Operations.alter_column.existing_nullable` to inform Alembic as
    to whether the emitted DDL should include "NULL" or "NOT NULL"; a warning
    is now emitted if this is missing under this scenario.

==== python-cryptography ====
Version update (36.0.1 -> 36.0.2)

- update to 36.0.2:
  * Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 1.1.1n.

==== rbac-lookup ====
Version update (0.7.1 -> 0.8.3)

- Update to version 0.8.3:
  * Get signing secret from vault and sign checksums
  * Update documentation
  * Update e2e test versions of k8s

==== wireless-regdb ====
Version update (20220218 -> 20220324)

- Update to version 20220324:
  * wireless-regdb: Update regulatory rules for Israel (IL)