Packages changed:
  apache2-mod_php8 (8.1.18 -> 8.1.19)
  dnsmasq
  firewalld
  gawk
  gnutls
  hwdata (0.369 -> 0.370)
  inxi (3.3.23 -> 3.3.27)
  kernel-source (6.3.1 -> 6.3.2)
  libnettle (3.8.1 -> 3.9)
  libpng16
  libstorage-ng (4.5.103 -> 4.5.105)
  memtest86+ (6.10 -> 6.20)
  mousepad (0.6.0 -> 0.6.1)
  nodejs20
  php8 (8.1.18 -> 8.1.19)
  ristretto (0.13.0 -> 0.13.1)
  rp-pppoe (3.15 -> 4.0)
  setxkbmap (1.3.3 -> 1.3.4)
  sysvinit (3.00 -> 3.07)
  texlive
  tnftp (20210827 -> 20230507)
  yast2-installation (4.6.2 -> 4.6.3)
  yast2-pkg-bindings (4.6.1 -> 4.6.2)
  yast2-services-manager (4.6.0 -> 4.6.1)

=== Details ===

==== apache2-mod_php8 ====
Version update (8.1.18 -> 8.1.19)

- version update to 8.1.19
  * This is a bug fix release.
  * https://www.php.net/ChangeLog-8.php#8.1.19
- modified patches
  % php-ar-flags.patch (refreshed)
  % php-build-reproducible-phar.patch (refreshed)
  % php-ini.patch (refreshed)
  % php-systzdata-v23.patch (refreshed)

==== dnsmasq ====

- Correct rundir from /var/run to /run for pid file

==== firewalld ====
Subpackages: firewalld-bash-completion firewalld-lang firewalld-zsh-completion python3-firewall

- Add firewalld-runstatedir.patch: change pid file location from
  /var/run to /run

==== gawk ====

- enable profiling

==== gnutls ====
Subpackages: libgnutls-dane0 libgnutls30 libgnutls30-32bit libgnutls30-hmac

- Disable GNULIB's year2038 also for 32-bit arm - boo#1211394

==== hwdata ====
Version update (0.369 -> 0.370)

- update to 0.370:
  * Update pci, usb and vendor ids

==== inxi ====
Version update (3.3.23 -> 3.3.27)

- Update to version 3.3.27:
  + /usr/share/doc/packages/inxi/inxi.changelog.

==== kernel-source ====
Version update (6.3.1 -> 6.3.2)

- Linux 6.3.2 (bsc#1012628).
- netfilter: nf_tables: deactivate anonymous set from preparation
  phase (bsc#1012628).
- arch_topology: Remove early cacheinfo error message if -ENOENT
  (bsc#1012628).
- debugobject: Ensure pool refill (again) (bsc#1012628).
- cifs: avoid potential races when handling multiple dfs tcons
  (bsc#1012628).
- cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath
  (bsc#1012628).
- cifs: fix potential race when tree connecting ipc (bsc#1012628).
- cifs: fix sharing of DFS connections (bsc#1012628).
- cifs: protect session status check in smb2_reconnect()
  (bsc#1012628).
- cifs: fix potential use-after-free bugs in
  TCP_Server_Info::hostname (bsc#1012628).
- io_uring/rsrc: check for nonconsecutive pages (bsc#1012628).
- perf intel-pt: Fix CYC timestamps after standalone CBR
  (bsc#1012628).
- perf auxtrace: Fix address filter entire kernel size
  (bsc#1012628).
- dm: don't lock fs when the map is NULL in process of resume
  (bsc#1012628).
- dm ioctl: fix nested locking in table_clear() to remove deadlock
  concern (bsc#1012628).
- dm flakey: fix a crash with invalid table line (bsc#1012628).
- dm integrity: call kmem_cache_destroy() in dm_integrity_init()
  error path (bsc#1012628).
- dm clone: call kmem_cache_destroy() in dm_clone_init() error
  path (bsc#1012628).
- dm verity: fix error handling for check_at_most_once on FEC
  (bsc#1012628).
- vhost_vdpa: fix unmap process in no-batch mode (bsc#1012628).
- mm/hugetlb: fix uffd-wp during fork() (bsc#1012628).
- mm/mempolicy: correctly update prev when policy is equal on
  mbind (bsc#1012628).
- ia64: fix an addr to taddr in huge_pte_offset() (bsc#1012628).
- s390/dasd: fix hanging blockdevice after request requeue
  (bsc#1012628).
- btrfs: scrub: reject unsupported scrub flags (bsc#1012628).
- scripts/gdb: fix lx-timerlist for Python3 (bsc#1012628).
- afs: Avoid endless loop if file is larger than expected
  (bsc#1012628).
- afs: Fix getattr to report server i_size on dirs, not local size
  (bsc#1012628).
- afs: Fix updating of i_size with dv jump from server
  (bsc#1012628).
- PM: hibernate: Do not get block device exclusively in
  test_resume mode (bsc#1012628).
- PM: hibernate: Turn snapshot_test into global variable
  (bsc#1012628).
- ACPI: PM: Do not turn of unused power resources on the Toshiba
  Click Mini (bsc#1012628).
- hte: tegra-194: Fix off by one in tegra_hte_map_to_line_id()
  (bsc#1012628).
- hte: tegra: fix 'struct of_device_id' build error (bsc#1012628).
- mfd: arizona-spi: Add missing MODULE_DEVICE_TABLE (bsc#1012628).
- mfd: ocelot-spi: Fix unsupported bulk read (bsc#1012628).
- mfd: tqmx86: Correct board names for TQMxE39x (bsc#1012628).
- mfd: tqmx86: Specify IO port register range more precisely
  (bsc#1012628).
- mfd: tqmx86: Do not access I2C_DETECT register through io_base
  (bsc#1012628).
- thermal/drivers/mediatek: Use devm_of_iomap to avoid resource
  leak in mtk_thermal_probe (bsc#1012628).
- pinctrl-bcm2835.c: fix race condition when setting gpio dir
  (bsc#1012628).
- dmaengine: at_xdmac: do not enable all cyclic channels
  (bsc#1012628).
- dmaengine: at_xdmac: restore the content of grws register
  (bsc#1012628).
- dmaengine: at_xdmac: do not resume channels paused by consumers
  (bsc#1012628).
- dmaengine: at_xdmac: fix imbalanced runtime PM reference counter
  (bsc#1012628).
- dmaengine: at_xdmac: disable/enable clock directly on
  suspend/resume (bsc#1012628).
- dmaengine: dw-edma: Fix to enable to issue dma request on DMA
  processing (bsc#1012628).
- dmaengine: dw-edma: Fix to change for continuous transfer
  (bsc#1012628).
- dma: gpi: remove spurious unlock in gpi_ch_init (bsc#1012628).
- phy: ti: j721e-wiz: Fix unreachable code in wiz_mode_select()
  (bsc#1012628).
- phy: tegra: xusb: Add missing tegra_xusb_port_unregister for
  usb2_port and ulpi_port (bsc#1012628).
- soundwire: intel: don't save hw_params for use in prepare
  (bsc#1012628).
- pwm: mtk-disp: Configure double buffering before reading in
  .get_state() (bsc#1012628).
- pwm: mtk-disp: Disable shadow registers before setting backlight
  values (bsc#1012628).
- leds: tca6507: Fix error handling of using
  fwnode_property_read_string (bsc#1012628).
- dmaengine: mv_xor_v2: Fix an error code (bsc#1012628).
- pinctrl: ralink: reintroduce ralink,rt2880-pinmux compatible
  string (bsc#1012628).
- leds: TI_LMU_COMMON: select REGMAP instead of depending on it
  (bsc#1012628).
    ... changelog too long, skipping 1100 lines ...
- commit 26ec1ca

==== libnettle ====
Version update (3.8.1 -> 3.9)
Subpackages: libhogweed6 libhogweed6-32bit libnettle8 libnettle8-32bit

- update to 3.9
  * rewrite of the C and plain x86_64 assembly implementations of
    GHASH to use precomputed tables in a different way, with tables
    always accessed in the same sequential manner. This should make
    Nettle's GHASH implementation side-channel silent on all
    platforms, but considerably slower on platforms without carry-
    less mul instructions. E.g., benchmarks of the C implementation
    on x86_64 showed a slowdown of 3 times.
  * Fix bug in ecdsa and gostdsa signature verify operation, for
    the unlikely corner case that point addition really is point
    duplication.
  * Fix for chacha on Power7, nettle's assembly used an instruction
    only available on later processors
  * Add support for the SM4 block cipher
  * Add support for the Balloon password hash
  * Add support for SIV-GCM authenticated encryption mode
  * Add support for OCB authenticated encryption mode.
  * New exported functions md5_compress, sha1_compress,
    sha256_compress, sha512_compress
  * multiple performance optimizations
  * Delete all arcfour assembly code. Affects 32-bit x86, 32-bit
    and 64-bit sparc

==== libpng16 ====

- do not use NEON instructions [bsc#1211176]

==== libstorage-ng ====
Version update (4.5.103 -> 4.5.105)
Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1

- merge gh#openSUSE/libstorage-ng#931
- added test programs for nvme list and list-subsys
- 4.5.105
- merge gh#openSUSE/libstorage-ng#930
- avoid to handle some fstab entries twice
- 4.5.104

==== memtest86+ ====
Version update (6.10 -> 6.20)

- Revert change from Mon Mar 13, as this prevents the use of memtest
  and memtest is no longer displayed in the boot menu.
- Update to 6.20
  - Add support for Alder Lake-N CPUs
  - Add support for VIA VT8233(A)/VT8237
  - Add support for nVidia nForce 3
  - Add support for ALi M1533/1543(C)/1535
  - Add temperature reporting on AMD K8 CPUs
  - Add some JEDEC Manufacturers
  - Better handling of SPD reading on Mobile CPUs
  - Fix APIC Timer fail on some mobile platforms
  - Fix older CPU (P5/P6-class) detection
- don't install files in /boot. The OS needs to stay in /usr

==== mousepad ====
Version update (0.6.0 -> 0.6.1)
Subpackages: libmousepad0 mousepad-lang

- Update to version 0.6.1
  * I18n: Update po/LINGUAS list
  * build: Optionally require polkit
  * build: Use m4_defined min versions and cleanup
  * build: Use XDT_VERSION_INIT and get rid of configure.ac.in
  * build: Switch from intltool to gettext
  * menubar: Improve some strings
  * search: Use consistent naming
  * history: Properly restore multi-window session
  * Restore opening mode only when it was overridden from the command
    line
  * Add "X of Y matches" to search bar and replace dialog (Closes #174)
  * Add application/x-zerosize to supported mime types (Fixes #194)
  * Apply opening mode also to the open dialog (Fixes #181)
  * Properly reconnect signal handler when auto-reload is enabled
  * Translation Updates

==== nodejs20 ====
Subpackages: npm20

- fix_ci_tests.patch: increase default timeout on unit tests
  to 20min from 2min. This seems to have lead to build failures
  on some platforms, like s390x in Factory. (bsc#1211407)

==== php8 ====
Version update (8.1.18 -> 8.1.19)
Subpackages: php8-cli php8-ctype php8-dom php8-gd php8-gettext php8-iconv php8-mbstring php8-mysql php8-openssl php8-pdo php8-sqlite php8-tokenizer php8-xmlreader php8-xmlwriter

- version update to 8.1.19
  * This is a bug fix release.
  * https://www.php.net/ChangeLog-8.php#8.1.19
- modified patches
  % php-ar-flags.patch (refreshed)
  % php-build-reproducible-phar.patch (refreshed)
  % php-ini.patch (refreshed)
  % php-systzdata-v23.patch (refreshed)

==== ristretto ====
Version update (0.13.0 -> 0.13.1)
Subpackages: ristretto-lang

- Update to version 0.13.1
  * I18n: Update po/LINGUAS list
  * Force g_file_query_info if magic_file returns
    "application/octet-stream"
  * build: Use m4_defined min versions and cleanup
  * Replace XDT_CHECK_LIBX11 and guard x11 code paths
  * build: Use XDT_VERSION_INIT and get rid of configure.ac.in
  * build: Switch from intltool to gettext
  * viewer: Paint background icon at window scale
  * Translation Updates

==== rp-pppoe ====
Version update (3.15 -> 4.0)

- Updated to 4.0:
  * SPDX-License-Identifier: tags added to most source files
  * rp-pppoe.so plugin: Modified to compile against both pppd >= 2.5.0 and
    pppd < 2.5.0.
  * pppoe-server: If -L or -R option is specified as 0.0.0.0, then IP allocation
    is delegated to pppd.
  * pppoe-server: New -g option specifies the path of the rp-pppoe.so plugin to
    use with pppd in kernel-mode PPPoE.
  * pppoe-server: New -U option specifies a UNIX-domain control socket.  This
    lets you send control commands to the server while it is running; see the
    pppoe-server man page for details.
  * All source code: Many cleanups and use of standard types like uint16_t rather
    than ones we define.
  * All source code: Support for OSes other than Linux has been dropped.
  * Documentation: Updated from modern Linux systems.
  * Cleanup: The following old and obsolete files have been removed:
  - Old connection scripts scripts/pppoe-connect.in, scripts/pppoe-start.in,
    scripts/pppoe-init-suse.in, scripts/pppoe-setup.in, scripts/pppoe-status,
    scripts/pppoe-init.in, and scripts/pppoe-stop.in
  * Obsolete firewall scripts configs/firewall-standalone and
    configs/firewall-masq
  - Obsolete configuration files configs/pppoe.conf and configs/pap-secrets
  - The Tcl/Tk gui script gui/tkpppoe.in and supporting files
  - The RPM spec file rp-pppoe.spec
- Drop rp-pppoe-3.14-nonrfc-modems.patch, rp-pppoe-3.14-resolve-conf.patch,
  rp-pppoe-3.14-config.patch, rp-pppoe-3.14-init.patch,
  patched scripts no longer exists.
- Drop rp-pppoe-3.14-release-buildsystem.patch, rp-pppoe-3.14-pie.patch
  rp-pppoe-3.14-strip.patch, no longer needed.

==== setxkbmap ====
Version update (1.3.3 -> 1.3.4)

- Update to version 1.3.4
  * gitlab CI: stop requiring Signed-off-by in commits
  * Be more careful about querying randr
  * Fix "Xwayland" spelling
  * Check for the XWAYLAND extension
  * Route the Xwayland warning through stderr

==== sysvinit ====
Version update (3.00 -> 3.07)

- Update to sysvinit 3.07
  * Fixed killall5 so that processes in the omit list are
    not sent any signals, including SIGSTOP.
  * Fixed usage message for killall5 to be more accurate.
  * pidof was not returning PIDs of programs which were launched
    using a symbolic link. (ie /tmp/sleep when /tmp/sleep links to /usr/bin/sleep).
    This is now fixed as we check both the realpath and symbolic path for processes.
    In other words, "pidof /tmp/sleep" and "pidof /usr/bin/sleep" will return
    the same PIDs when /tmp/sleep is a symbolic link to /usr/bin/sleep.
  * Fixed memory initialization error in pidof. Fix provided by Markus Fischer.
  * Accepted patch from Mark Hindley  which avoids clearing realpath information
    in pidof when trying to find matching executables.
  * Mark Hindley fixed typo in es.po
  * Mark Hindley cleaned up translation code in src/Makefile.
  * Drop sulogin from Debian build. Removed libcrypt-dev dependency.
  * Fixed pt translation pages which were failing due to mis-matched
    open/close tags.
  * Makefile now respects ROOT prefix when setting up pidof-to-killall5
    symbolic link.
  * Removed redundant translation files from man directory.
  * Makefile now respects DESTDIR. User can specify either ROOT= or DESTDIR=
    to set install prefix.
  * Helge Kreutzmann provided updated Makefile for
    translation of manual pages. This has been added
    to the man directory.
  * Added sys/sysmacros.h include in mountpoint.c to fix
    compiler errors on systems where major/minor macros were not defined.
  * Applied patches from Mark Hindley to clean up man page
    Makefile, translations and installs of new man pages.
  * Remove reliance on linux/fs.h as it conflicts with glibc 2.36.
    Patch provided by lucascars.
  * Mark Hindley supplied patch to make bootlogd compile
    on GNU Hurd systems. Was missing major/minor macro.
  * Fixed formatting in init.8 man page.
    Patch provided by Mark Hindley.
  * Added q and Q flags to synopsis in shutdown manual page.
  * Applied fixes for markup and spacing in manual pages.
    Patch provided by Mario Blattermann.
  * Added translation framework (po4a) from Mario Blttermann.
  * Added Makefile for man/ directory. Will handle translations
    and substitutions.
  * Applied new translations for multiple languages from Mario Blattermann.
  * Added ability to use "@" symbol in command named in the inittab file. This
    treats commands as literal and does not launch a shell to interpret them.
  * Updated inittab manual page to include overview of symbols which trigger
    a shell interpretor and how to disable them using the @ symbol.
  * Introduced change which adds error checking in bootlogd when performing
    chdir(). - Provided by Alexander Vickberg
  * Add check for console using TIOCGDEV on Linux systems in bootlogd to
    make finding console more robust. - Provided by Alexander Vickberg
  * Default to showing processes in the uninterruptable state (D).
    The -z flag no longer affects whether processes in D state are shown.
    The -z flag does still toggle whether zombie (Z) processes are shown.
  * Removed unnecessary check which is always true from init tab parsing.
- Port patches
  * sysvinit-2.88dsf-suse.patch
  * sysvinit-2.90-no-kill.patch
  * sysvinit-2.90.dif
- Add keyring as well as signature for source tar ball of sysvinit

==== texlive ====
Subpackages: libkpathsea6 libsynctex2

- Add patch source-luatex.dif
  * Update to luatex 1.17.0 with the fixes for CVE-2023-32668 and
    CVE-2023-32700 (bsc#1211389) VUL-0: TeXLive: Arbitrary code
    execution in LuaTeX

==== tnftp ====
Version update (20210827 -> 20230507)

- Update to version 20230507
  * Add timeout for SSL connection setup, defaulting to 60
    seconds.
  * Consistently use poll(2) instead of select(2).
  * Check EAGAIN as well as EINTR.
  * Simplify includes.
- Update to version 20230409
  * Add option sslnoverify to control validation of SSL
    certificates.
  * Add netrc processing to fetch-mode (URL on command line)
    to enable options and autologin via netrc.
  * Fix SSL cleanup in some error paths.
  * Support SSL certificate validation by default.
    FTPSSLNOVERIFY=1 in the environment to disable validation.
  * Handle relative URLs.
  * Improve ftp(1) markup.
  * Fix -? in a more portable manner.

==== yast2-installation ====
Version update (4.6.2 -> 4.6.3)

- Use a larger font for xterm during installation via X resources
  (bsc#1211267)
  Details: https://github.com/yast/yast-installation/pull/1085
  4.6.3

==== yast2-pkg-bindings ====
Version update (4.6.1 -> 4.6.2)

- Dropped the *-devel-doc subpackage (related to bsc#1211319)
- 4.6.2

==== yast2-services-manager ====
Version update (4.6.0 -> 4.6.1)

- Improved help text for services table (bsc#1211320)
- 4.6.1