Packages changed:
  alsa-utils
  argyllcms (3.0.2 -> 3.1.0)
  containerd
  curl
  firewalld (2.0.2 -> 2.1.0)
  git
  gnome-software
  google-noto-sans-cjk-fonts
  kernel-source (6.6.9 -> 6.6.10)
  python-attrs (23.1.0 -> 23.2.0)
  python-greenlet
  python-typing_extensions (4.8.0 -> 4.9.0)
  sg3_utils (1.48+3.b642f6a -> 1.48+6.7f43e14)
  vulkan-loader
  wtmpdb (0.10.0 -> 0.11.0)
  yast2-trans (84.87.20231230.7bdda36766 -> 84.87.20240105.ae431f155e)

=== Details ===

==== alsa-utils ====

- Backport upstream fixes:
  buffer overflow fixes in aplay, segfault in aplaymidi, etc:
  0008-topology-include-locale.h.patch
  0009-nhlt-dmic-info.c-include-sys-types.h.patch
  0010-topology-pre-processor-Add-support-for-enum-controls.patch
  0011-configure.ac-fix-UMP-support-detection.patch
  0012-bat-really-skip-analysis-of-the-first-period-and-upd.patch
  0013-topology-add-include-for-ENABLE_NLS-on-musl.patch
  0014-nhlt-use-stdint.h-types.patch
  0015-Revert-nhlt-dmic-info.c-include-sys-types.h.patch
  0016-aplay-use-stdint.h-types-instead-u_int-u_short-u_cha.patch
  0017-alsa-restore.rules-use-devnode-instead-number-atribu.patch
  0018-nhlt-Revert-SSP_ANALOG-device_type-field.patch
  0019-alsactl-fix-potential-buffer-overwrite.patch
  0020-aplay-fix-buffer-overflow-and-tainted-format-string.patch
  0021-misc-fix-incorrect-usages-of-strerror.patch
  0022-aplay-Add-option-for-specifying-subformat.patch
  0023-aplay-allow-to-compile-with-older-alsa-lib-subformat.patch
  0024-aplay-log-pcm-status-before-reporting-a-fatal-error.patch
  0025-aplay-enable-timestamps-by-default.patch
  0026-aplay-status-dumps-are-called-only-in-verbose-mode.patch
  0027-aplaymidi-Set-event-completely-for-tempo-event.patch

==== argyllcms ====
Version update (3.0.2 -> 3.1.0)

- update to 3.1.0:
  * Fixed bug in CMYK profile B2A table creation that sometimes resulted in
    bumpy black generation. (Only occurred when compiled using recent gcc with
    code optimization.)
  * Changed ICC profile serialization of pure ASCII text tags emit a warning
    rather than error if they are fed non-ASCII utf8 input.
  * Made ICC code a little more robust against bad profiles. (Thanks to David Hoyt).
  * Fixed latent bug in X11 plot code that caused window not to be created or
    updated when dowait == 0. This shows up on Linux as failure of spotread -S
    to show spectral plot.
  * Fixed problem with colorhug not noticing errors from the instrument.
  * Updated scanin/it8Wolf.cht to improve accuracy of grey wedge patch recognition.
  * Merged some Debian patches, including spelling fixes.

==== containerd ====

- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch

==== curl ====
Subpackages: libcurl4

- Added curl-adjust-pollset-fix.patch to fix broken MPD http streaming:
  https://github.com/curl/curl/issues/12632

==== firewalld ====
Version update (2.0.2 -> 2.1.0)
Subpackages: firewalld-bash-completion firewalld-lang python3-firewall

- update to 2.1.0:
  * eat(service): add DNS over QUIC (DoQ) Service (5130430)
  * feat(icmp): add ICMPv6 Multicast Listener Discovery (MLD) types (dd88bbf)
  * feat(fw): add ReloadPolicy option in firewalld.conf (0019371)
  * feat(service): add submission service (tcp 587) (d6a9561)
  * feat(service): Add alvr (3a92358)
  * feat(service): add vrrp (d62fc8d)
  [* Renamed patch 0002-Disable-FlushAllOnReload-option.patch to
    0001-Disable-FlushAllOnReload-option.patch
  [* Renamed patch firewalld-runstatedir.patch to 0002-firewalld-runstatedir.patch]

==== git ====

- git moved to /usr/libexec/git/git, update AppArmor profile
  accordingly (boo#1218588)

==== gnome-software ====
Subpackages: gnome-software-lang gnome-software-plugin-packagekit

- Do not use _distconfdir on SLE/Leap less than version 16.

==== google-noto-sans-cjk-fonts ====
Subpackages: google-noto-sans-jp-bold-fonts google-noto-sans-jp-fonts google-noto-sans-jp-regular-fonts google-noto-sans-kr-bold-fonts google-noto-sans-kr-fonts google-noto-sans-kr-regular-fonts google-noto-sans-sc-bold-fonts google-noto-sans-sc-fonts google-noto-sans-sc-regular-fonts google-noto-sans-tc-bold-fonts google-noto-sans-tc-fonts google-noto-sans-tc-regular-fonts

- Redownload zip fonts file from upstream, they were changed
  during github migration somehow.

==== kernel-source ====
Version update (6.6.9 -> 6.6.10)

- Refresh
  patches.suse/firewire-ohci-suppress-unexpected-system-reboot-in-A.patch.
  Update upstream status and move to sorted section.
- commit 7d3b8d0
- Linux 6.6.10 (bsc#1012628).
- Revert "platform/x86: p2sb: Allow p2sb_bar() calls during PCI
  device probe" (bsc#1012628).
- netfilter: nf_tables: skip set commit for deleted/destroyed sets
  (bsc#1012628).
- wifi: nl80211: fix deadlock in nl80211_set_cqm_rssi (6.6.x)
  (bsc#1012628).
- wifi: cfg80211: fix CQM for non-range use (bsc#1012628).
- tracing: Fix blocked reader of snapshot buffer (bsc#1012628).
- ftrace: Fix modification of direct_function hash while in use
  (bsc#1012628).
- ring-buffer: Fix wake ups when buffer_percent is set to 100
  (bsc#1012628).
- Revert "nvme-fc: fix race between error recovery and creating
  association" (bsc#1012628).
- mm/memory-failure: check the mapcount of the precise page
  (bsc#1012628).
- mm/memory-failure: cast index to loff_t before shifting it
  (bsc#1012628).
- mm: migrate high-order folios in swap cache correctly
  (bsc#1012628).
- mm/filemap: avoid buffered read/write race to read inconsistent
  data (bsc#1012628).
- selftests: secretmem: floor the memory size to the multiple
  of page_size (bsc#1012628).
- maple_tree: do not preallocate nodes for slot stores
  (bsc#1012628).
- platform/x86: p2sb: Allow p2sb_bar() calls during PCI device
  probe (bsc#1012628).
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
  (bsc#1012628).
- platform/x86/intel/pmc: Move GBE LTR ignore to suspend callback
  (bsc#1012628).
- platform/x86/intel/pmc: Allow reenabling LTRs (bsc#1012628).
- platform/x86/intel/pmc: Add suspend callback (bsc#1012628).
- block: renumber QUEUE_FLAG_HW_WC (bsc#1012628).
- mptcp: fix inconsistent state on fastopen race (bsc#1012628).
- mptcp: fix possible NULL pointer dereference on close
  (bsc#1012628).
- mptcp: refactor sndbuf auto-tuning (bsc#1012628).
- linux/export: Ensure natural alignment of kcrctab array
  (bsc#1012628).
- linux/export: Fix alignment for 64-bit ksymtab entries
  (bsc#1012628).
- kexec: select CRYPTO from KEXEC_FILE instead of depending on it
  (bsc#1012628).
- kexec: fix KEXEC_FILE dependencies (bsc#1012628).
- Update config files.
  The defaults for s390 taken from the master branch.
- virtio_ring: fix syncs DMA memory with different direction
  (bsc#1012628).
- fs: cifs: Fix atime update check (bsc#1012628).
- client: convert to new timestamp accessors (bsc#1012628).
- fs: new accessor methods for atime and mtime (bsc#1012628).
- ksmbd: avoid duplicate opinfo_put() call on error of
  smb21_lease_break_ack() (bsc#1012628).
- ksmbd: lazy v2 lease break on smb2_write() (bsc#1012628).
- ksmbd: send v2 lease break notification for directory
  (bsc#1012628).
- ksmbd: downgrade RWH lease caching state to RH for directory
  (bsc#1012628).
- ksmbd: set v2 lease capability (bsc#1012628).
- ksmbd: set epoch in create context v2 lease (bsc#1012628).
- ksmbd: don't update ->op_state as OPLOCK_STATE_NONE on error
  (bsc#1012628).
- ksmbd: move setting SMB2_FLAGS_ASYNC_COMMAND and AsyncId
  (bsc#1012628).
- ksmbd: release interim response after sending status pending
  response (bsc#1012628).
- ksmbd: move oplock handling after unlock parent dir
  (bsc#1012628).
- ksmbd: separately allocate ci per dentry (bsc#1012628).
- ksmbd: prevent memory leak on error return (bsc#1012628).
- ksmbd: fix kernel-doc comment of ksmbd_vfs_kern_path_locked()
  (bsc#1012628).
- ksmbd: no need to wait for binded connection termination at
  logoff (bsc#1012628).
- ksmbd: add support for surrogate pair conversion (bsc#1012628).
- ksmbd: fix missing RDMA-capable flag for IPoIB device in
  ksmbd_rdma_capable_netdev() (bsc#1012628).
- ksmbd: fix kernel-doc comment of ksmbd_vfs_setxattr()
  (bsc#1012628).
- ksmbd: reorganize ksmbd_iov_pin_rsp() (bsc#1012628).
- ksmbd: Remove unused field in ksmbd_user struct (bsc#1012628).
- commit b5b393f
- Delete doc/config-options.changes (jsc#PED-5021)
  Following on adedbd2a5c6 ("kernel-source: Remove config-options.changes
  (jsc#PED-5021)"), remove the now unused file from the tree.
- commit e04388e
- Refresh
  patches.suse/firewire-ohci-suppress-unexpected-system-reboot-in-A.patch.
  Update upstream status.
- commit 6da42fc
- Update config files.
  Only run oldconfig to keep up with the lost configs.
    ... changelog too long, skipping 19 lines ...
- commit aa5424d

==== python-attrs ====
Version update (23.1.0 -> 23.2.0)

- update to 23.2.0:
  * The type annotation for `attrs.resolve_types()` is now
    correct.
  * Type stubs now use `typing.dataclass_transform` to decorate
    dataclass-like decorators, instead of the non-standard
    `__dataclass_transform__` special form, which is only
    supported by Pyright.
  * Fixed serialization of namedtuple fields using
    `attrs.asdict/astuple()` with `retain_collection_types=True`.
  * `attrs.AttrsInstance` is now a `typing.Protocol` in both type
    hints and code.
  * This allows you to subclass it along with another `Protocol`.
  * If *attrs* detects that `__attrs_pre_init__` accepts more
    than just `self`, it will call it with the same arguments as
    `__init__` was called.
  * This allows you to, for example, pass arguments to
    `super().__init__()`.
  * Slotted classes now transform `functools.cached_property`
    decorated methods to support equivalent semantics.
  * Added *class_body* argument to `attrs.make_class()` to
    provide additional attributes for newly created classes.
  * It is, for example, now possible to attach methods.

==== python-greenlet ====

- require setuptools

==== python-typing_extensions ====
Version update (4.8.0 -> 4.9.0)

- update to 4.9.0:
  * This feature release adds `typing_extensions.ReadOnly`, as
    specified by PEP 705, and makes various other improvements,
    especially to `@typing_extensions.deprecated()`.
  * Add support for PEP 705, adding `typing_extensions.ReadOnly`.
  * All parameters on `NewType.__call__` are now positional-only.
    This means that the signature of
    `typing_extensions.NewType.__call__` now exactly matches the
  * signature of `typing.NewType.__call__`.
  * Fix bug with using `@deprecated` on a mixin class.
  * Exclude `__match_args__` from `Protocol` members.
  * When creating a `typing_extensions.NamedTuple` class, ensure
    `__set_name__` is called on all objects that define
    `__set_name__` and exist in the values of the `NamedTuple`
    class's class dictionary.

==== sg3_utils ====
Version update (1.48+3.b642f6a -> 1.48+6.7f43e14)
Subpackages: libsgutils2-1_48-2

- Upstream bug fixes for sg3_utils 1.48 (bsc#1218591)
  * sg_turs: fix missing CDB on several codepaths
  * sg_dd: fix bug that identified all block devices as NVME
  * rescan-scsi-bus.sh: avoid root FS going read-only with
    "rescan-scsi-bus.sh -r" (gh#doug-gilbert/sg3_utils#46)

==== vulkan-loader ====

- Align the fallback XDG config dirs with SUSE spec in-case it
  can't read it from the environment

==== wtmpdb ====
Version update (0.10.0 -> 0.11.0)
Subpackages: libwtmpdb0

- Update to version 0.11.0
  - last: add support for time-format option

==== yast2-trans ====
Version update (84.87.20231230.7bdda36766 -> 84.87.20240105.ae431f155e)
Subpackages: yast2-trans-cs yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-fr yast2-trans-hu yast2-trans-it yast2-trans-ja yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ru yast2-trans-zh_CN yast2-trans-zh_TW

- Update to version 84.87.20240105.ae431f155e:
  * Translated using Weblate (German)
  * Translated using Weblate (German)
  * Translated using Weblate (German)
  * Translated using Weblate (Romanian)