Packages changed:
  Mesa (21.3.6 -> 21.3.7)
  Mesa-drivers (21.3.6 -> 21.3.7)
  ell (0.48 -> 0.49)
  geoclue2
  installation-images-MicroOS (17.44 -> 17.45)
  kernel-source (5.16.10 -> 5.16.11)
  keylime (6.3.0 -> 6.3.1)
  libaom (3.2.0 -> 3.3.0)
  libblockdev
  libglvnd
  libzypp (17.29.4 -> 17.29.5)
  polkit-default-privs (1550+20211214.daf2765 -> 1550+20220225.330e064)
  selinux-policy
  systemd
  zypper (1.14.51 -> 1.14.52)

=== Details ===

==== Mesa ====
Version update (21.3.6 -> 21.3.7)
Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1

- update to 21.3.7
  * sixth bugfix release

==== Mesa-drivers ====
Version update (21.3.6 -> 21.3.7)
Subpackages: Mesa-dri Mesa-gallium

- update to 21.3.7
  * sixth bugfix release

==== ell ====
Version update (0.48 -> 0.49)

- update to 0.49:
  * Fix issue with multiple offers from the same DHCP server.
  * Fix issue with Base64 decoding and bytes consumed validation.

==== geoclue2 ====
Subpackages: system-user-srvGeoClue typelib-1_0-Geoclue-2_0

- Add CONFIG parameter to %sysusers_generate_pre

==== installation-images-MicroOS ====
Version update (17.44 -> 17.45)

- merge gh#openSUSE/installation-images#580
- fix user/group creation in initrd (bsc#1196331)
- 17.45

==== kernel-source ====
Version update (5.16.10 -> 5.16.11)

- Update config files.
  A vanilla fix for commit 17ec1907657a (simplefb: Enable boot time VESA
  graphic mode selection (bsc#1193250).)
- commit 90630c5
- Linux 5.16.11 (bsc#1012628).
- drm/nouveau/pmu/gm200-: use alternate falcon reset sequence
  (bsc#1012628).
- bpf: Introduce composable reg, ret and arg types (bsc#1012628).
- bpf: Replace ARG_XXX_OR_NULL with ARG_XXX | PTR_MAYBE_NULL
  (bsc#1012628).
- bpf: Replace RET_XXX_OR_NULL with RET_XXX | PTR_MAYBE_NULL
  (bsc#1012628).
- bpf: Replace PTR_TO_XXX_OR_NULL with PTR_TO_XXX | PTR_MAYBE_NULL
  (bsc#1012628).
- bpf: Introduce MEM_RDONLY flag (bsc#1012628).
- bpf: Convert PTR_TO_MEM_OR_NULL to composable types
  (bsc#1012628).
- bpf: Make per_cpu_ptr return rdonly PTR_TO_MEM (bsc#1012628).
- bpf: Add MEM_RDONLY for helper args that are pointers to rdonly
  mem (bsc#1012628).
- bpf/selftests: Test PTR_TO_RDONLY_MEM (bsc#1012628).
- HID:Add support for UGTABLET WP5540 (bsc#1012628).
- Revert "svm: Add warning message for AVIC IPI invalid target"
  (bsc#1012628).
- parisc: Show error if wrong 32/64-bit compiler is being used
  (bsc#1012628).
- serial: parisc: GSC: fix build when IOSAPIC is not set
  (bsc#1012628).
- parisc: Drop __init from map_pages declaration (bsc#1012628).
- parisc: Fix data TLB miss in sba_unmap_sg (bsc#1012628).
- parisc: Fix sglist access in ccio-dma.c (bsc#1012628).
- mmc: block: fix read single on recovery logic (bsc#1012628).
- mm: don't try to NUMA-migrate COW pages that have other uses
  (bsc#1012628).
- HID: amd_sfh: Add illuminance mask to limit ALS max value
  (bsc#1012628).
- HID: i2c-hid: goodix: Fix a lockdep splat (bsc#1012628).
- HID: amd_sfh: Increase sensor command timeout (bsc#1012628).
- selftests: kvm: Remove absent target file (bsc#1012628).
- HID: amd_sfh: Correct the structure field name (bsc#1012628).
- PCI: hv: Fix NUMA node assignment when kernel boots with custom
  NUMA topology (bsc#1012628).
- parisc: Add ioread64_lo_hi() and iowrite64_lo_hi()
  (bsc#1012628).
- HID: apple: Set the tilde quirk flag on the Wellspring 5 and
  later (bsc#1012628).
- btrfs: don't hold CPU for too long when defragging a file
  (bsc#1012628).
- btrfs: send: in case of IO error log it (bsc#1012628).
- btrfs: defrag: don't try to defrag extents which are under
  writeback (bsc#1012628).
- ASoC: mediatek: fix unmet dependency on GPIOLIB for SND_SOC_DMIC
  (bsc#1012628).
- platform/x86: touchscreen_dmi: Add info for the RWC NANOTE P8
  AY07J 2-in-1 (bsc#1012628).
- platform/x86: ISST: Fix possible circular locking dependency
  detected (bsc#1012628).
- platform/x86: amd-pmc: Correct usage of SMU version
  (bsc#1012628).
- kunit: tool: Import missing importlib.abc (bsc#1012628).
- selftests: rtc: Increase test timeout so that all tests run
  (bsc#1012628).
- kselftest: signal all child processes (bsc#1012628).
- selftests: netfilter: reduce zone stress test running time
  (bsc#1012628).
- net: ieee802154: at86rf230: Stop leaking skb's (bsc#1012628).
- selftests/zram: Skip max_comp_streams interface on newer kernel
  (bsc#1012628).
- selftests/zram01.sh: Fix compression ratio calculation
  (bsc#1012628).
- selftests/zram: Adapt the situation that /dev/zram0 is being
  used (bsc#1012628).
- selftests: openat2: Print also errno in failure messages
  (bsc#1012628).
- selftests: openat2: Add missing dependency in Makefile
  (bsc#1012628).
- selftests: openat2: Skip testcases that fail with EOPNOTSUPP
  (bsc#1012628).
- selftests: skip mincore.check_file_mmap when fs lacks needed
  support (bsc#1012628).
- ax25: improve the incomplete fix to avoid UAF and NPD bugs
  (bsc#1012628).
- cifs: unlock chan_lock before calling cifs_put_tcp_session
  (bsc#1012628).
- pinctrl: bcm63xx: fix unmet dependency on REGMAP for GPIO_REGMAP
  (bsc#1012628).
- vfs: make freeze_super abort when sync_filesystem returns error
  (bsc#1012628).
- vfs: make sync_filesystem return errors from ->sync_fs
  (bsc#1012628).
- quota: make dquot_quota_sync return errors from ->sync_fs
  (bsc#1012628).
- scsi: pm80xx: Fix double completion for SATA devices
  (bsc#1012628).
- kselftest: Fix vdso_test_abi return status (bsc#1012628).
- scsi: core: Reallocate device's budget map on queue depth change
  (bsc#1012628).
- scsi: pm8001: Fix use-after-free for aborted TMF sas_task
  (bsc#1012628).
- scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task
  (bsc#1012628).
- drm/amd: Warn users about potential s0ix problems (bsc#1012628).
- mailmap: update Christian Brauner's email address (bsc#1012628).
- nvme: fix a possible use-after-free in controller reset during
  load (bsc#1012628).
- nvme-tcp: fix possible use-after-free in transport
  error_recovery work (bsc#1012628).
- nvme-rdma: fix possible use-after-free in transport
  error_recovery work (bsc#1012628).
- net: sparx5: do not refer to skb after passing it on
  (bsc#1012628).
- drm/amd: add support to check whether the system is set to s3
  (bsc#1012628).
- drm/amd: Only run s3 or s0ix if system is configured properly
  (bsc#1012628).
- drm/amdgpu: fix logic inversion in check (bsc#1012628).
- x86/Xen: streamline (and fix) PV CPU enumeration (bsc#1012628).
- Revert "module, async: async_synchronize_full() on module init
  iff async is used" (bsc#1012628).
- gcc-plugins/stackleak: Use noinstr in favor of notrace
  (bsc#1012628).
- random: wake up /dev/random writers after zap (bsc#1012628).
- KVM: x86/xen: Fix runstate updates to be atomic when preempting
  vCPU (bsc#1012628).
- KVM: x86: nSVM/nVMX: set nested_run_pending on VM entry which
  is a result of RSM (bsc#1012628).
- KVM: x86: SVM: don't passthrough SMAP/SMEP/PKE bits in !NPT &&
  !gCR0.PG case (bsc#1012628).
- KVM: x86: nSVM: fix potential NULL derefernce on nested
  migration (bsc#1012628).
- KVM: x86: nSVM: mark vmcb01 as dirty when restoring SMM saved
  state (bsc#1012628).
- iwlwifi: remove deprecated broadcast filtering feature
  (bsc#1012628).
- iwlwifi: fix use-after-free (bsc#1012628).
- drm/mediatek: mtk_dsi: Avoid EPROBE_DEFER loop with external
  bridge (bsc#1012628).
- drm/radeon: Fix backlight control on iMac 12,1 (bsc#1012628).
- drm/atomic: Don't pollute crtc_state->mode_blob with error
  pointers (bsc#1012628).
- drm/amd/pm: correct the sequence of sending gpu reset msg
  (bsc#1012628).
- drm/amdgpu: skipping SDMA hw_init and hw_fini for S0ix
  (bsc#1012628).
- drm/i915/opregion: check port number bounds for SWSCI display
  power state (bsc#1012628).
- drm/i915: Fix dbuf slice config lookup (bsc#1012628).
- drm/i915: Fix mbus join config lookup (bsc#1012628).
- vsock: remove vsock from connected table when connect is
  interrupted by a signal (bsc#1012628).
- tee: export teedev_open() and teedev_close_context()
  (bsc#1012628).
- optee: use driver internal tee_context for some rpc
  (bsc#1012628).
- drm/cma-helper: Set VM_DONTEXPAND for mmap (bsc#1012628).
- drm/i915/gvt: Make DRM_I915_GVT depend on X86 (bsc#1012628).
- drm/i915/ttm: tweak priority hint selection (bsc#1012628).
- iwlwifi: pcie: fix locking when "HW not ready" (bsc#1012628).
- iwlwifi: pcie: gen2: fix locking when "HW not ready"
  (bsc#1012628).
- iwlwifi: mvm: fix condition which checks the version of
  rate_n_flags (bsc#1012628).
- iwlwifi: fix iwl_legacy_rate_to_fw_idx (bsc#1012628).
- iwlwifi: mvm: don't send SAR GEO command for 3160 devices
  (bsc#1012628).
- selftests: netfilter: fix exit value for nft_concat_range
  (bsc#1012628).
- netfilter: nft_synproxy: unregister hooks on init error path
  (bsc#1012628).
- selftests: netfilter: disable rp_filter on router (bsc#1012628).
- ipv4: fix data races in fib_alias_hw_flags_set (bsc#1012628).
- ipv6: fix data-race in fib6_info_hw_flags_set / fib6_purge_rt
  (bsc#1012628).
- ipv6: mcast: use rcu-safe version of ipv6_get_lladdr()
  (bsc#1012628).
- ipv6: per-netns exclusive flowlabel checks (bsc#1012628).
- Revert "net: ethernet: bgmac: Use
  devm_platform_ioremap_resource_byname" (bsc#1012628).
- mac80211: mlme: check for null after calling kmemdup
  (bsc#1012628).
- brcmfmac: firmware: Fix crash in brcm_alt_fw_path (bsc#1012628).
- cfg80211: fix race in netlink owner interface destruction
  (bsc#1012628).
- net: dsa: lan9303: fix reset on probe (bsc#1012628).
- net: dsa: mv88e6xxx: flush switchdev FDB workqueue before
  removing VLAN (bsc#1012628).
- net: dsa: lantiq_gswip: fix use after free in gswip_remove()
  (bsc#1012628).
- net: dsa: lan9303: handle hwaccel VLAN tags (bsc#1012628).
- net: dsa: lan9303: add VLAN IDs to master device (bsc#1012628).
- net: ieee802154: ca8210: Fix lifs/sifs periods (bsc#1012628).
- ping: fix the dif and sdif check in ping_lookup (bsc#1012628).
- bonding: force carrier update when releasing slave
  (bsc#1012628).
- mctp: fix use after free (bsc#1012628).
- drop_monitor: fix data-race in dropmon_net_event /
  trace_napi_poll_hit (bsc#1012628).
- net_sched: add __rcu annotation to netdev->qdisc (bsc#1012628).
- crypto: af_alg - get rid of alg_memory_allocated (bsc#1012628).
- bonding: fix data-races around agg_select_timer (bsc#1012628).
- nfp: flower: netdev offload check for ip6gretap (bsc#1012628).
- net/smc: Avoid overwriting the copies of clcsock callback
  functions (bsc#1012628).
- net: phy: mediatek: remove PHY mode check on MT7531
  (bsc#1012628).
- atl1c: fix tx timeout after link flap on Mikrotik 10/25G NIC
  (bsc#1012628).
- tipc: fix wrong publisher node address in link publications
  (bsc#1012628).
- dpaa2-switch: fix default return of
  dpaa2_switch_flower_parse_mirror_key (bsc#1012628).
- dpaa2-eth: Initialize mutex used in one step timestamping path
  (bsc#1012628).
- net: mscc: ocelot: fix use-after-free in ocelot_vlan_del()
  (bsc#1012628).
- net: bridge: multicast: notify switchdev driver whenever MC
  processing gets disabled (bsc#1012628).
- perf bpf: Defer freeing string after possible strlen() on it
  (bsc#1012628).
- selftests/exec: Add non-regular to TEST_GEN_PROGS (bsc#1012628).
- arm64: Correct wrong label in macro __init_el2_gicv3
  (bsc#1012628).
- ALSA: usb-audio: revert to IMPLICIT_FB_FIXED_DEV for M-Audio
  FastTrack Ultra (bsc#1012628).
- ALSA: hda/realtek: Add quirk for Legion Y9000X 2019
  (bsc#1012628).
- ALSA: hda: Fix regression on forced probe mask option
  (bsc#1012628).
- ALSA: hda: Fix missing codec probe on Shenker Dock 15
  (bsc#1012628).
- ASoC: ops: Fix stereo change notifications in
  snd_soc_put_volsw() (bsc#1012628).
- ASoC: ops: Fix stereo change notifications in
  snd_soc_put_volsw_range() (bsc#1012628).
- ASoC: ops: Fix stereo change notifications in
  snd_soc_put_volsw_sx() (bsc#1012628).
- ASoC: ops: Fix stereo change notifications in
  snd_soc_put_xr_sx() (bsc#1012628).
- cifs: fix set of group SID via NTSD xattrs (bsc#1012628).
- cifs: fix confusing unneeded warning message on smb2.1 and
  earlier (bsc#1012628).
- ACPI: processor: idle: fix lockup regression on 32-bit ThinkPad
  T40 (bsc#1012628).
- powerpc/603: Fix boot failure with DEBUG_PAGEALLOC and KFENCE
  (bsc#1012628).
- powerpc/lib/sstep: fix 'ptesync' build error (bsc#1012628).
- mtd: rawnand: gpmi: don't leak PM reference in error path
  (bsc#1012628).
- smb3: fix snapshot mount option (bsc#1012628).
- tipc: fix wrong notification node addresses (bsc#1012628).
- scsi: ufs: Remove dead code (bsc#1012628).
- scsi: ufs: Fix a deadlock in the error handler (bsc#1012628).
- ASoC: tas2770: Insert post reset delay (bsc#1012628).
- ASoC: qcom: Actually clear DMA interrupt register for HDMI
  (bsc#1012628).
- block/wbt: fix negative inflight counter when remove scsi device
  (bsc#1012628).
- NFS: Remove an incorrect revalidation in
  nfs4_update_changeattr_locked() (bsc#1012628).
- NFS: LOOKUP_DIRECTORY is also ok with symlinks (bsc#1012628).
- NFS: Do not report writeback errors in nfs_getattr()
  (bsc#1012628).
- tty: n_tty: do not look ahead for EOL character past the end
  of the buffer (bsc#1012628).
- block: fix surprise removal for drivers calling
  blk_set_queue_dying (bsc#1012628).
- mtd: rawnand: qcom: Fix clock sequencing in qcom_nandc_probe()
  (bsc#1012628).
- mtd: parsers: qcom: Fix kernel panic on skipped partition
  (bsc#1012628).
- mtd: parsers: qcom: Fix missing free for pparts in cleanup
  (bsc#1012628).
- mtd: phram: Prevent divide by zero bug in phram_setup()
  (bsc#1012628).
- mtd: rawnand: brcmnand: Fixed incorrect sub-page ECC status
  (bsc#1012628).
- scsi: lpfc: Fix pt2pt NVMe PRLI reject LOGO loop (bsc#1012628).
- EDAC: Fix calculation of returned address and next offset in
  edac_align_ptr() (bsc#1012628).
- x86/ptrace: Fix xfpregs_set()'s incorrect xmm clearing
  (bsc#1012628).
- ucounts: Base set_cred_ucounts changes on the real user
  (bsc#1012628).
- ucounts: Handle wrapping in is_ucounts_overlimit (bsc#1012628).
- ucounts: Enforce RLIMIT_NPROC not RLIMIT_NPROC+1 (bsc#1012628).
- rlimit: Fix RLIMIT_NPROC enforcement failure caused by
  capability calls in set_user (bsc#1012628).
- ucounts: Move RLIMIT_NPROC handling after set_user
  (bsc#1012628).
- net: sched: limit TC_ACT_REPEAT loops (bsc#1012628).
- dmaengine: sh: rcar-dmac: Check for error num after setting mask
  (bsc#1012628).
- dmaengine: stm32-dmamux: Fix PM disable depth imbalance in
  stm32_dmamux_probe (bsc#1012628).
- dmaengine: sh: rcar-dmac: Check for error num after
  dma_set_max_seg_size (bsc#1012628).
- tests: fix idmapped mount_setattr test (bsc#1012628).
- i2c: qcom-cci: don't delete an unregistered adapter
  (bsc#1012628).
- i2c: qcom-cci: don't put a device tree node before
  i2c_add_adapter() (bsc#1012628).
- dmaengine: ptdma: Fix the error handling path in pt_core_init()
  (bsc#1012628).
- copy_process(): Move fd_install() out of sighand->siglock
  critical section (bsc#1012628).
- scsi: qedi: Fix ABBA deadlock in qedi_process_tmf_resp()
  and qedi_process_cmd_cleanup_resp() (bsc#1012628).
- ASoC: wm_adsp: Correct control read size when parsing compressed
  buffer (bsc#1012628).
- ice: enable parsing IPSEC SPI headers for RSS (bsc#1012628).
- i2c: brcmstb: fix support for DSL and CM variants (bsc#1012628).
- lockdep: Correct lock_classes index mapping (bsc#1012628).
- HID: elo: fix memory leak in elo_probe (bsc#1012628).
- mtd: rawnand: ingenic: Fix missing put_device in ingenic_ecc_get
  (bsc#1012628).
- Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj
  (bsc#1012628).
- KVM: x86/pmu: Refactoring find_arch_event() to pmc_perf_hw_id()
  (bsc#1012628).
- KVM: x86/pmu: Don't truncate the PerfEvtSeln MSR when creating
  a perf event (bsc#1012628).
- KVM: x86/pmu: Use AMD64_RAW_EVENT_MASK for PERF_TYPE_RAW
  (bsc#1012628).
- ARM: OMAP2+: hwmod: Add of_node_put() before break
  (bsc#1012628).
- ARM: OMAP2+: adjust the location of put_device() call in
  omapdss_init_of (bsc#1012628).
- phy: usb: Leave some clocks running during suspend
  (bsc#1012628).
- staging: vc04_services: Fix RCU dereference check (bsc#1012628).
- phy: phy-mtk-tphy: Fix duplicated argument in phy-mtk-tphy
  (bsc#1012628).
- irqchip/sifive-plic: Add missing thead,c900-plic match string
  (bsc#1012628).
- x86/bug: Merge annotate_reachable() into _BUG_FLAGS() asm
  (bsc#1012628).
- netfilter: conntrack: don't refresh sctp entries in closed state
  (bsc#1012628).
- ksmbd: fix same UniqueId for dot and dotdot entries
  (bsc#1012628).
- ksmbd: don't align last entry offset in smb2 query directory
  (bsc#1012628).
- lib/iov_iter: initialize "flags" in new pipe_buffer
  (bsc#1012628).
- arm64: dts: meson-gx: add ATF BL32 reserved-memory region
  (bsc#1012628).
- arm64: dts: meson-g12: add ATF BL32 reserved-memory region
  (bsc#1012628).
- arm64: dts: meson-g12: drop BL32 region from SEI510/SEI610
  (bsc#1012628).
- pidfd: fix test failure due to stack overflow on some arches
  (bsc#1012628).
- selftests: fixup build warnings in pidfd / clone3 tests
  (bsc#1012628).
- mm: io_uring: allow oom-killer from io_uring_setup
  (bsc#1012628).
- ACPI: PM: Revert "Only mark EC GPE for wakeup on Intel systems"
  (bsc#1012628).
- kconfig: let 'shell' return enough output for deep path names
  (bsc#1012628).
- ata: libata-core: Disable TRIM on M88V29 (bsc#1012628).
- soc: aspeed: lpc-ctrl: Block error printing on probe defer cases
  (bsc#1012628).
- xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create
  (bsc#1012628).
- drm/rockchip: dw_hdmi: Do not leave clock enabled in error case
  (bsc#1012628).
- tracing: Fix tp_printk option related with
  tp_printk_stop_on_boot (bsc#1012628).
- display/amd: decrease message verbosity about watermarks table
  failure (bsc#1012628).
- drm/amdgpu: add utcl2_harvest to gc 10.3.1 (bsc#1012628).
- drm/amd/display: Cap pflip irqs per max otg number
  (bsc#1012628).
- drm/amd/display: fix yellow carp wm clamping (bsc#1012628).
- net: usb: qmi_wwan: Add support for Dell DW5829e (bsc#1012628).
- net: macb: Align the dma and coherent dma masks (bsc#1012628).
- kconfig: fix failing to generate auto.conf (bsc#1012628).
- Update config files.
- commit 607a2b1
- Refresh
  patches.suse/libsubcmd-Fix-use-after-free-for-realloc-.-0.patch.
  Update upstream status.
- commit 1c604e1
- bpf: add config to allow loading modules with BTF mismatches (bsc#1194501).
- Update config files.
- commit 4e672b2
- simplefb: Enable boot time VESA graphic mode selection (bsc#1193250).
- Update config files.
- commit 17ec190
- libsubcmd: Fix use-after-free for realloc(..., 0) (gcc 12).
- commit 6e98c6d

==== keylime ====
Version update (6.3.0 -> 6.3.1)
Subpackages: keylime-agent keylime-config keylime-firewalld keylime-registrar keylime-tpm_cert_store keylime-verifier python38-keylime

- Drop patches beacuse merged upstream:
  * version.diff
  * cloud_verifier_tornado-use-fork_processes.patch
- Drop binaries not used anymore:
  * keylime_provider_platform_init
  * keylime_provider_registrar
  * keylime_provider_vtpm_add
- Update to version v6.3.1:
  * revocation_notifier: mark webhook threads as daemon and add timeout
  * Fix Packit CI test plan Summary
  * Enable Packit CI testing on CentOS Stream 8
  * Enable Packit CI testing on Fedora Rawhide
  * Remove last trace of TPM 1.2 (hopefully)
  * verifier: remove start_tornado() function
  * verifier: wait for connections to be closed before stopping ioloop
  * revocation_notifier: kill ZeroMQ broker if it blocks more than 5s
  * Add more e2e tests to Packit CI
  * Enable EPEL repo on CentOS Stream in packit.yaml
  * agent, crypto: add localhost, server and contact ip to agent certificate
  * Add better default repo path for run_local.sh
  * Fix incorrect variable name in test_restful
  * Run existing agent tests against the rust-keylime agent
  * Fix small wording mistakes caught while reading the code
  * agent: move key and certificate logging levels from debug to info
  * agent: allow absolute paths for rsa_keyname and mtls_cert
  * Add missing backend parameter
  * cloud_verifier_tornado: use fork_processes
  * ci: automatically push release to PyPI
  * setup.{py,cfg}: Move setup configuration to setup.cfg
  * Add iproute tool to Dockerfile
  * Pylint does not like single-line functions.
  * A small beauty fix
  * This is a small fix to proactively fix Issue #840 by identifying non-escaped double quotes in the tpm2-tools output
  * setup.py: add version number and new Python versions, drop unsed binaries
  * setup.py, config: install default configuration into package path
  * ci: move old keylime.conf to keylime.conf.orig before running tests
  * retry: fix pylint issue
  * Adding Infineon Optiga 034 RSA and ECC certificates for Infineon SLB9675 devices.
  * Ensure columns "mb_refstate" and "allowlist" are of type LONGTEXT in table "verifiermain"
  * tenant: add exponential backoff option to retry timings
  * cloud verifier: add exponential backoff option to retry timings
  * tpm: add exponential backoff option to retry timings
  * test, retry: add unit test for retry algorithm
  * common: add algorithm for retry time calculation
  * registrar, tpm_main: ensure that correct types are commited to DB.
  * Fix typo for config param listen_notifications
  * Lint is _really_ unhappy today.
  * Linty fixes
  * Adding a unit test file for tpm_main
  * tpm_main: check if PCRs for the hash algorithm are available
  * tpm_main: handle if tpm2_checkquote returns no PCRs for a hash algorithm
  * agent: output supported_version as result not as a status
  * Add missing subcommands to -c help message
  * tests: fix mtls_cert generation in test_restful.py
  * revocation_notifier: fix socket path permission check
  * Remove unused database_query config param
  * Move umask calls only on entry points
  * config: move directory utilities to fs_util

==== libaom ====
Version update (3.2.0 -> 3.3.0)

- Update to version 3.3.0:
  * This release includes compression efficiency and perceptual
    quality improvements, speedup and memory optimizations, some
    new features, and several bug fixes.
  * New Features
  - AV1 RT: Introducing CDEF search level 5
  - Changed real time speed 4 to behave the same as real time
    speed 5
  - Add --deltaq-strength
  - rtc: Allow scene-change and overshoot detection for svc
  - rtc: Intra-only frame for svc
  - AV1 RT: Option 2 for codec control AV1E_SET_ENABLE_CDEF to
    disable CDEF on non-ref frames
  - New codec controls AV1E_SET_LOOPFILTER_CONTROL and
    AOME_GET_LOOPFILTER_LEVEL
  - Improvements to three pass encoding
  * Compression Efficiency Improvements: Overall compression gains:
    0.6%
  * Perceptual Quality Improvements
  - Improves the perceptual quality of high QP encoding for
    delta-q mode 4
  - Auto select noise synthesis level for all intra
  * Speedup and Memory Optimizations
  - Added many SSE2 optimizations.
  - Good quality 2-pass encoder speedups:
    o Speed 2: 9%
    o Speed 3: 12.5%
    o Speed 4: 8%
    o Speed 5: 3%
    o Speed 6: 4%
  - Real time mode encoder speedups:
    o Speed 5: 2.6% BDRate gain, 4% speedup
    o Speed 6: 3.5% BDRate gain, 4% speedup
    o Speed 9: 1% BDRate gain, 3% speedup
    o Speed 10: 3% BDRate gain, neutral speedup
  - All intra encoding speedups (AVIF):
    o Single thread - speed 6: 8%
    o Single thread - speed 9: 15%
    o Multi thread(8) - speed 6: 14%
    o Multi thread(8) - speed 9: 34%
  * Bug Fixes
  - Issue 3163: Segmentation fault when using
  - -enable-keyframe-filtering=2
  - Issue 2436: Integer overflow in av1_warp_affine_c()
  - Issue 3226: armv7 build failure due to gcc-11
  - Issue 3195: Bug report on libaom (AddressSanitizer:
    heap-buffer-overflow)
  - Issue 3191: Bug report on libaom (AddressSanitizer: SEGV on
    unknown address)
- Drop libaom-devel Requires from libaom-devel-doc sub-package: We
  do not need the devel package to be able to read the devel
  documentation.

==== libblockdev ====
Subpackages: libbd_crypto2 libbd_fs2 libbd_loop2 libbd_lvm2 libbd_mdraid2 libbd_part2 libbd_swap2 libbd_utils2 libblockdev2

- Stop packaging deprecated libbd_vdo2 and libbd_vdo-devel, via
  passing without-vdo to configure. Also add Obsoletes for both
  packages aswell as the 2 alternative package names they provided.
  Standalone vdo modules are deprecated in udisks2 since version
  2.9.0, and we have stopped building them there, and udisks2 was
  the only known consumer of libblockdevs vdo support, stop
  building them here also.

==== libglvnd ====

- Update libglvnd-add-bti.patch from latest upstream submission

==== libzypp ====
Version update (17.29.4 -> 17.29.5)

- Hint on ptf<>patch resolver conflicts (bsc#1194848)
- version 17.29.5 (22)

==== polkit-default-privs ====
Version update (1550+20211214.daf2765 -> 1550+20220225.330e064)

- Update to version 1550+20220225.330e064:
  * Whitelist Kcron (bsc#1193945)
  * deepin-api: drop manage-locale action that is not package on openSUSE
  * udisks2: remove manage-vdo action

==== selinux-policy ====
Subpackages: selinux-policy-targeted

- use %license tag for COPYING file

==== systemd ====
Subpackages: libsystemd0 libudev1 udev

- Fix a regression caused by the split of the sysusers config files shipped by
  systemd (bsc#1196322)
  Calls to %sysusers_create were not updated accordingly.
- spec: fix dependencies for mini variants (follow-up)
  systemd-mini-container is one of the sub-package that relies systemd-mini to
  conflict with kiwi and to not be installed on real systems.

==== zypper ====
Version update (1.14.51 -> 1.14.52)
Subpackages: zypper-needs-restarting

- info: print the packages upstream URL if available (fixes #426)
- info: Fix SEGV with not installed PTFs (bsc#1196317)
- Don't prevent less restrictive umasks (bsc#1195999)
- version 1.14.52