Packages changed:
  kernel-source (5.1.10 -> 5.1.15)
  okteta (0.26.1 -> 0.26.2)
  xfce4-panel-plugin-cpugraph (1.0.91 -> 1.1.0)

=== Details ===

==== kernel-source ====
Version update (5.1.10 -> 5.1.15)
Subpackages: kernel-default kernel-default-devel kernel-devel kernel-docs kernel-macros kernel-syms kernel-vanilla

- Revert "ovl: detect overlapping layers" (openqa tests failing).
- Revert "ovl: don't fail with disconnected lower NFS" (openqa
  tests failing).
- Revert "ovl: fix bogus -Wmaybe-unitialized warning" (openqa
  tests failing).
- commit cb24bc9
- Linux 5.1.15 (bnc#1012628).
- tracing: Silence GCC 9 array bounds warning (bnc#1012628).
- mmc: sdhci: sdhci-pci-o2micro: Correctly set bus width when
  tuning (bnc#1012628).
- mmc: sdhi: disallow HS400 for M3-W ES1.2, RZ/G2M, and V3H
  (bnc#1012628).
- mmc: mediatek: fix SDIO IRQ interrupt handle flow (bnc#1012628).
- mmc: mediatek: fix SDIO IRQ detection issue (bnc#1012628).
- mmc: core: API to temporarily disable retuning for SDIO CRC
  errors (bnc#1012628).
- mmc: core: Add sdio_retune_hold_now() and sdio_retune_release()
  (bnc#1012628).
- mmc: core: Prevent processing SDIO IRQs when the card is
  suspended (bnc#1012628).
- scsi: ufs: Avoid runtime suspend possibly being blocked forever
  (bnc#1012628).
- usb: chipidea: udc: workaround for endpoint conflict issue
  (bnc#1012628).
- xhci: detect USB 3.2 capable host controllers correctly
  (bnc#1012628).
- usb: xhci: Don't try to recover an endpoint if port is in
  error state (bnc#1012628).
- cifs: add spinlock for the openFileList to cifsInodeInfo
  (bnc#1012628).
- cifs: fix GlobalMid_Lock bug in cifs_reconnect (bnc#1012628).
- IB/hfi1: Validate fault injection opcode user input
  (bnc#1012628).
- IB/hfi1: Close PSM sdma_progress sleep window (bnc#1012628).
- IB/hfi1: Avoid hardlockup with flushlist_lock (bnc#1012628).
- IB/hfi1: Correct tid qp rcd to match verbs context
  (bnc#1012628).
- IB/hfi1: Silence txreq allocation warnings (bnc#1012628).
- iio: imu: st_lsm6dsx: fix PM support for st_lsm6dsx i2c
  controller (bnc#1012628).
- iio: temperature: mlx90632 Relax the compatibility check
  (bnc#1012628).
- Input: synaptics - enable SMBus on ThinkPad E480 and E580
  (bnc#1012628).
- Input: uinput - add compat ioctl number translation for
  UI_*_FF_UPLOAD (bnc#1012628).
- Input: silead - add MSSL0017 to acpi_device_id (bnc#1012628).
- apparmor: fix PROFILE_MEDIATES for untrusted input
  (bnc#1012628).
- apparmor: enforce nullbyte at end of tag string (bnc#1012628).
- apparmor: reset pos on failure to unpack for various functions
  (bnc#1012628).
- Revert "brcmfmac: disable command decode in sdio_aos"
  (bnc#1012628).
- brcmfmac: sdio: Disable auto-tuning around commands expected
  to fail (bnc#1012628).
- brcmfmac: sdio: Don't tune while the card is off (bnc#1012628).
- lkdtm/usercopy: Moves the KERNEL_DS test to non-canonical
  (bnc#1012628).
- ARC: fix build warnings (bnc#1012628).
- dmaengine: jz4780: Fix transfers being ACKed too soon
  (bnc#1012628).
- dmaengine: dw-axi-dmac: fix null dereference when pointer
  first is null (bnc#1012628).
- dmaengine: mediatek-cqdma: sleeping in atomic context
  (bnc#1012628).
- dmaengine: sprd: Fix the possible crash when getting descriptor
  status (bnc#1012628).
- dmaengine: sprd: Add validation of current descriptor in irq
  handler (bnc#1012628).
- dmaengine: sprd: Fix the incorrect start for 2-stage destination
  channels (bnc#1012628).
- dmaengine: sprd: Fix block length overflow (bnc#1012628).
- dmaengine: sprd: Fix the right place to configure 2-stage
  transfer (bnc#1012628).
- ARC: [plat-hsdk]: Add missing multicast filter bins number to
  GMAC node (bnc#1012628).
- ARC: [plat-hsdk]: Add missing FIFO size entry in GMAC node
  (bnc#1012628).
- MIPS: mark ginvt() as __always_inline (bnc#1012628).
- fpga: stratix10-soc: fix use-after-free on s10_init()
  (bnc#1012628).
- fpga: dfl: afu: Pass the correct device to dma_mapping_error()
  (bnc#1012628).
- fpga: dfl: Add lockdep classes for pdata->lock (bnc#1012628).
- parport: Fix mem leak in parport_register_dev_model
  (bnc#1012628).
- parisc: Fix compiler warnings in float emulation code
  (bnc#1012628).
- habanalabs: fix bug in checking huge page optimization
  (bnc#1012628).
- IB/rdmavt: Fix alloc_qpn() WARN_ON() (bnc#1012628).
- IB/hfi1: Insure freeze_work work_struct is canceled on shutdown
  (bnc#1012628).
- IB/{qib, hfi1, rdmavt}: Correct ibv_devinfo max_mr value
  (bnc#1012628).
- IB/hfi1: Validate page aligned for a given virtual address
  (bnc#1012628).
- MIPS: uprobes: remove set but not used variable 'epc'
  (bnc#1012628).
- crypto: hmac - fix memory leak in hmac_init_tfm() (bnc#1012628).
- xtensa: Fix section mismatch between memblock_reserve and
  mem_reserve (bnc#1012628).
- kselftest/cgroup: fix unexpected testing failure on
  test_memcontrol (bnc#1012628).
- kselftest/cgroup: fix unexpected testing failure on test_core
  (bnc#1012628).
- kselftest/cgroup: fix incorrect test_core skip (bnc#1012628).
- userfaultfd: selftest: fix compiler warning (bnc#1012628).
- selftests: vm: install test_vmalloc.sh for run_vmtests
  (bnc#1012628).
- net: dsa: mv88e6xxx: avoid error message on remove from VLAN 0
  (bnc#1012628).
- net: hns: Fix loopback test failed at copper ports
  (bnc#1012628).
- mdesc: fix a missing-check bug in get_vdev_port_node_info()
  (bnc#1012628).
- sparc: perf: fix updated event period in response to
  PERF_EVENT_IOC_PERIOD (bnc#1012628).
- net: ethernet: mediatek: Use hw_feature to judge if HWLRO is
  supported (bnc#1012628).
- net: ethernet: mediatek: Use NET_IP_ALIGN to judge if HW
  RX_2BYTE_OFFSET is enabled (bnc#1012628).
- selftests: set sysctl bc_forwarding properly in
  router_broadcast.sh (bnc#1012628).
- drm/arm/mali-dp: Add a loop around the second set CVAL and
  try 5 times (bnc#1012628).
- drm/arm/hdlcd: Actually validate CRTC modes (bnc#1012628).
- drm/arm/hdlcd: Allow a bit of clock tolerance (bnc#1012628).
- nvmet: fix data_len to 0 for bdev-backed write_zeroes
  (bnc#1012628).
- kbuild: tar-pkg: enable communication with jobserver
  (bnc#1012628).
- scripts/checkstack.pl: Fix arm64 wrong or unknown architecture
  (bnc#1012628).
- net: phylink: avoid reducing support mask (bnc#1012628).
- scsi: ufs: Check that space was properly alloced in
  copy_query_response (bnc#1012628).
- scsi: smartpqi: unlock on error in
  pqi_submit_raid_request_synchronous() (bnc#1012628).
- net: ipvlan: Fix ipvlan device tso disabled while
  NETIF_F_IP_CSUM is set (bnc#1012628).
- udmabuf: actually unmap the scatterlist (bnc#1012628).
- tests: fix pidfd-test compilation (bnc#1012628).
- s390/qeth: handle limited IPv4 broadcast in L3 TX path
  (bnc#1012628).
- s390/qeth: check dst entry before use (bnc#1012628).
- s390/qeth: fix VLAN attribute in bridge_hostnotify udev event
  (bnc#1012628).
- hwmon: (core) add thermal sensors only if dev->of_node is
  present (bnc#1012628).
- hwmon: (pmbus/core) Treat parameters as paged if on multiple
  pages (bnc#1012628).
- arm64: Silence gcc warnings about arch ABI drift (bnc#1012628).
- nvme: Fix u32 overflow in the number of namespace list
  calculation (bnc#1012628).
- ovl: detect overlapping layers (bnc#1012628).
- ovl: don't fail with disconnected lower NFS (bnc#1012628).
- ovl: fix bogus -Wmaybe-unitialized warning (bnc#1012628).
- btrfs: start readahead also in seed devices (bnc#1012628).
- can: xilinx_can: use correct bittiming_const for CAN FD core
  (bnc#1012628).
- can: flexcan: fix timeout when set small bitrate (bnc#1012628).
- can: purge socket error queue on sock destruct (bnc#1012628).
- riscv: mm: synchronize MMU after pte change (bnc#1012628).
- powerpc/bpf: use unsigned division instruction for 64-bit
  operations (bnc#1012628).
- ARM: imx: cpuidle-imx6sx: Restrict the SW2ISO increase to
  i.MX6SX (bnc#1012628).
- ARM: mvebu_v7_defconfig: fix Ethernet on Clearfog (bnc#1012628).
- ARM: dts: dra76x: Update MMC2_HS200_MANUAL1 iodelay values
  (bnc#1012628).
- ARM: dts: am57xx-idk: Remove support for voltage switching
  for SD card (bnc#1012628).
- arm64/sve: <uapi/asm/ptrace.h> should not depend on
  <uapi/linux/prctl.h> (bnc#1012628).
- arm64: ssbd: explicitly depend on <linux/prctl.h> (bnc#1012628).
- KVM: x86/mmu: Allocate PAE root array when using SVM's 32-bit
  NPT (bnc#1012628).
- ovl: make i_ino consistent with st_ino in more cases
  (bnc#1012628).
- drm/vmwgfx: Use the backdoor port if the HB port is not
  available (bnc#1012628).
- drm/i915: Don't clobber M/N values during fastset check
  (bnc#1012628).
- binder: fix possible UAF when freeing buffer (bnc#1012628).
- staging: erofs: add requirements field in superblock
  (bnc#1012628).
- Bluetooth: Align minimum encryption key size for LE and BR/EDR
  connections (bnc#1012628).
- Bluetooth: Fix regression with minimum encryption key size
  alignment (bnc#1012628).
- SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing
  write (bnc#1012628).
- x86/vdso: Prevent segfaults due to hoisted vclock reads
  (bnc#1012628).
- fs/namespace: fix unprivileged mount propagation (bnc#1012628).
- cfg80211: fix memory leak of wiphy device name (bnc#1012628).
- mac80211: drop robust management frames from unknown TA
  (bnc#1012628).
- {nl,mac}80211: allow 4addr AP operation on crypto controlled
  devices (bnc#1012628).
- mac80211: handle deauthentication/disassociation from TDLS peer
  (bnc#1012628).
- nl80211: fix station_info pertid memory leak (bnc#1012628).
- mac80211: Do not use stack memory with scatterlist for GMAC
  (bnc#1012628).
- x86/resctrl: Don't stop walking closids when a locksetup group
  is found (bnc#1012628).
- powerpc/mm/64s/hash: Reallocate context ids on fork
  (bnc#1012628).
- Refresh patches.suse/apparmor-compatibility-with-v2.x-net.patch.
- commit e222743
- Linux 5.1.14 (bnc#1012628).
- tcp: refine memory limit test in tcp_fragment() (bnc#1012628).
- commit f291042
- Linux 5.1.13 (bnc#1012628).
- coredump: fix race condition between collapse_huge_page()
  and core dumping (bnc#1012628).
- nvme-tcp: fix queue mapping when queue count is limited
  (bnc#1012628).
- nvme-tcp: fix possible null deref on a timed out io queue
  connect (bnc#1012628).
- nvme-tcp: rename function to have nvme_tcp prefix (bnc#1012628).
- mm: mmu_gather: remove __tlb_reset_range() for force flush
  (bnc#1012628).
- ocfs2: fix error path kobject memory leak (bnc#1012628).
- mlxsw: spectrum: Prevent force of 56G (bnc#1012628).
- scsi: libsas: delete sas port if expander discover failed
  (bnc#1012628).
- scsi: scsi_dh_alua: Fix possible null-ptr-deref (bnc#1012628).
- scsi: smartpqi: properly set both the DMA mask and the coherent
  DMA mask (bnc#1012628).
- scsi: libcxgbi: add a check for NULL pointer in
  cxgbi_check_route() (bnc#1012628).
- net: phy: dp83867: Set up RGMII TX delay (bnc#1012628).
- net: phy: dp83867: increase SGMII autoneg timer duration
  (bnc#1012628).
- net: phy: dp83867: fix speed 10 in sgmii mode (bnc#1012628).
- net: phylink: ensure consistent phy interface mode
  (bnc#1012628).
- blk-mq: Fix memory leak in error handling (bnc#1012628).
- net: sh_eth: fix mdio access in sh_eth_close() for R-Car Gen2
  and RZ/A1 SoCs (bnc#1012628).
- arm64: use the correct function type for __arm64_sys_ni_syscall
  (bnc#1012628).
- arm64: use the correct function type in SYSCALL_DEFINE0
  (bnc#1012628).
- arm64: fix syscall_fn_t type (bnc#1012628).
- ALSA: fireface: Use ULL suffixes for 64-bit constants
  (bnc#1012628).
- KVM: PPC: Book3S HV: Don't take kvm->lock around
  kvm_for_each_vcpu (bnc#1012628).
- KVM: PPC: Book3S: Use new mutex to synchronize access to rtas
  token list (bnc#1012628).
- KVM: PPC: Book3S HV: Use new mutex to synchronize MMU setup
  (bnc#1012628).
- dfs_cache: fix a wrong use of kfree in flush_cache_ent()
  (bnc#1012628).
- xenbus: Avoid deadlock during suspend due to open transactions
  (bnc#1012628).
- xen/pvcalls: Remove set but not used variable (bnc#1012628).
- dpaa_eth: use only online CPU portals (bnc#1012628).
- ia64: fix build errors by exporting paddr_to_nid()
  (bnc#1012628).
- perf record: Fix s390 missing module symbol and warning for
  non-root users (bnc#1012628).
- perf namespace: Protect reading thread's namespace
  (bnc#1012628).
- s390/zcrypt: Fix wrong dispatching for control domain CPRBs
  (bnc#1012628).
- perf data: Fix 'strncat may truncate' build failure with recent
  gcc (bnc#1012628).
- configfs: Fix use-after-free when accessing sd->s_dentry
  (bnc#1012628).
- ALSA: hda - Force polling mode on CNL for fixing codec
  communication (bnc#1012628).
- i2c: dev: fix potential memory leak in i2cdev_ioctl_rdwr
  (bnc#1012628).
- net: aquantia: fix LRO with FCS error (bnc#1012628).
- net: aquantia: tx clean budget logic error (bnc#1012628).
- drm/etnaviv: lock MMU while dumping core (bnc#1012628).
- ACPI/PCI: PM: Add missing wakeup.flags.valid checks
  (bnc#1012628).
- net: tulip: de4x5: Drop redundant MODULE_DEVICE_TABLE()
  (bnc#1012628).
- dpaa2-eth: Use PTR_ERR_OR_ZERO where appropriate (bnc#1012628).
- dpaa2-eth: Fix potential spectre issue (bnc#1012628).
- io_uring: Fix __io_uring_register() false success (bnc#1012628).
- net: stmmac: dwmac-mediatek: modify csr_clk value to fix mdio
  read/write fail (bnc#1012628).
- net: stmmac: fix csr_clk can't be zero issue (bnc#1012628).
- net: stmmac: update rx tail pointer register to fix rx dma
  hang issue (bnc#1012628).
- gpio: fix gpio-adp5588 build errors (bnc#1012628).
- perf/ring-buffer: Always use {READ,WRITE}_ONCE() for
  rb->user_page data (bnc#1012628).
- perf/ring_buffer: Add ordering to rb->nest increment
  (bnc#1012628).
- perf/ring_buffer: Fix exposing a temporarily decreased data_head
  (bnc#1012628).
- x86/CPU/AMD: Don't force the CPB cap when running under a
  hypervisor (bnc#1012628).
- mISDN: make sure device name is NUL terminated (bnc#1012628).
- usb: xhci: Fix a potential null pointer dereference in
  xhci_debugfs_create_endpoint() (bnc#1012628).
- powerpc/powernv: Return for invalid IMC domain (bnc#1012628).
- clk: ti: clkctrl: Fix clkdm_clk handling (bnc#1012628).
- selftests: netfilter: missing error check when setting up veth
  interface (bnc#1012628).
- ipvs: Fix use-after-free in ip_vs_in (bnc#1012628).
- netfilter: nft_fib: Fix existence check support (bnc#1012628).
- netfilter: nf_queue: fix reinject verdict handling
  (bnc#1012628).
- perf/x86/intel/ds: Fix EVENT vs. UEVENT PEBS constraints
  (bnc#1012628).
- netfilter: nf_tables: fix oops during rule dump (bnc#1012628).
- pinctrl: intel: Clear interrupt status in mask/unmask callback
  (bnc#1012628).
- staging: wilc1000: Fix some double unlock bugs in
  wilc_wlan_cleanup() (bnc#1012628).
- Staging: vc04_services: Fix a couple error codes (bnc#1012628).
- staging: erofs: set sb->s_root to NULL when failing from
  __getname() (bnc#1012628).
- iio: imu: mpu6050: Fix FIFO layout for ICM20602 (bnc#1012628).
- net/mlx5e: Avoid detaching non-existing netdev under switchdev
  mode (bnc#1012628).
- net: correct udp zerocopy refcnt also when zerocopy only on
  append (bnc#1012628).
- net/mlx5e: Support tagged tunnel over bond (bnc#1012628).
- mlxsw: spectrum_buffers: Reduce pool size on Spectrum-2
  (bnc#1012628).
- net/mlx5e: Fix source port matching in fdb peer flow rule
  (bnc#1012628).
- mlxsw: spectrum_flower: Fix TOS matching (bnc#1012628).
- net/mlx5e: Add ndo_set_feature for uplink representor
  (bnc#1012628).
- mlxsw: spectrum_router: Refresh nexthop neighbour when it
  becomes dead (bnc#1012628).
- net/mlx5: Update pci error handler entries and command
  translation (bnc#1012628).
- net: ethtool: Allow matching on vlan DEI bit (bnc#1012628).
- net: dsa: microchip: Don't try to read stats for unused ports
  (bnc#1012628).
- net: mvpp2: prs: Use the correct helpers when removing all
  VID filters (bnc#1012628).
- net: mvpp2: prs: Fix parser range for VID filtering
  (bnc#1012628).
- geneve: Don't assume linear buffers in error handler
  (bnc#1012628).
- vxlan: Don't assume linear buffers in error handler
  (bnc#1012628).
- net/mlx5: Avoid reloading already removed devices (bnc#1012628).
- vsock/virtio: set SOCK_DONE on peer shutdown (bnc#1012628).
- tipc: purge deferredq list for each grp member in
  tipc_group_delete (bnc#1012628).
- sunhv: Fix device naming inconsistency between sunhv_console
  and sunhv_reg (bnc#1012628).
- sctp: Free cookie before we memdup a new one (bnc#1012628).
- nfc: Ensure presence of required attributes in the
  deactivate_target handler (bnc#1012628).
- net: tls, correctly account for copied bytes with multiple
  sk_msgs (bnc#1012628).
- net: openvswitch: do not free vport if register_netdevice()
  is failed (bnc#1012628).
- net: dsa: rtl8366: Fix up VLAN filtering (bnc#1012628).
- neigh: fix use-after-free read in pneigh_get_next (bnc#1012628).
- lapb: fixed leak of control-blocks (bnc#1012628).
- ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero
  (bnc#1012628).
- hv_netvsc: Set probe mode to sync (bnc#1012628).
- be2net: Fix number of Rx queues used for flow hashing
  (bnc#1012628).
- ax25: fix inconsistent lock state in ax25_destroy_timer
  (bnc#1012628).
- netfilter: nat: fix udp checksum corruption (bnc#1012628).
- commit 5fe336c
- Update
  patches.kernel.org/5.1.8-025-btrfs-qgroup-Check-bg-while-resuming-relocation.patch
  (bnc#1012628 bnc#1134806).
- commit e868173
- Linux 5.1.12 (bnc#1012628).
- powerpc/64s: Fix THP PMD collapse serialisation (bnc#1012628).
- powerpc: Fix kexec failure on book3s/32 (bnc#1012628).
- drm: add fallback override/firmware EDID modes workaround
  (bnc#1012628).
- drm/edid: abstract override/firmware EDID retrieval
  (bnc#1012628).
- x86/resctrl: Prevent NULL pointer dereference when local MBM
  is disabled (bnc#1012628).
- x86/mm/KASLR: Compute the size of the vmemmap section properly
  (bnc#1012628).
- x86/kasan: Fix boot with 5-level paging and KASAN (bnc#1012628).
- x86/microcode, cpuhotplug: Add a microcode loader CPU hotplug
  callback (bnc#1012628).
- RAS/CEC: Fix binary search function (bnc#1012628).
- RAS/CEC: Convert the timer callback to a workqueue
  (bnc#1012628).
- timekeeping: Repair ktime_get_coarse*() granularity
  (bnc#1012628).
- tracing/uprobe: Fix NULL pointer dereference in
  trace_uprobe_create() (bnc#1012628).
- USB: serial: option: add Telit 0x1260 and 0x1261 compositions
  (bnc#1012628).
- USB: serial: option: add support for Simcom SIM7500/SIM7600
  RNDIS mode (bnc#1012628).
- USB: serial: pl2303: add Allied Telesis VT-Kit3 (bnc#1012628).
- USB: usb-storage: Add new ID to ums-realtek (bnc#1012628).
- USB: Fix chipmunk-like voice when using Logitech C270 for
  recording audio (bnc#1012628).
- usb: dwc2: host: Fix wMaxPacketSize handling (fix webcam
  regression) (bnc#1012628).
- usb: dwc2: Fix DMA cache alignment issues (bnc#1012628).
- drm/vmwgfx: NULL pointer dereference from
  vmw_cmd_dx_view_define() (bnc#1012628).
- drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader()
  leading to an invalid read (bnc#1012628).
- tools/kvm_stat: fix fields filter for child events
  (bnc#1012628).
- kvm: selftests: aarch64: fix default vm mode (bnc#1012628).
- kvm: selftests: aarch64: dirty_log_test: fix unaligned memslot
  size (bnc#1012628).
- KVM: s390: fix memory slot handling for
  KVM_SET_USER_MEMORY_REGION (bnc#1012628).
- KVM: x86/pmu: do not mask the value that is written to fixed
  PMUs (bnc#1012628).
- KVM: x86/pmu: mask the result of rdpmc according to the width
  of the counters (bnc#1012628).
- KVM: x86: do not spam dmesg with VMCS/VMCB dumps (bnc#1012628).
- KVM: LAPIC: Fix lapic_timer_advance_ns parameter overflow
  (bnc#1012628).
- kvm: vmx: Fix -Wmissing-prototypes warnings (bnc#1012628).
- KVM: selftests: Fix a condition in test_hv_cpuid()
  (bnc#1012628).
- KVM: nVMX: really fix the size checks on KVM_SET_NESTED_STATE
  (bnc#1012628).
- KVM: arm/arm64: Move cc/it checks under hyp's Makefile to
  avoid instrumentation (bnc#1012628).
- tools/io_uring: fix Makefile for pthread library link
  (bnc#1012628).
- nvme-pci: use blk-mq mapping for unmanaged irqs (bnc#1012628).
- usbnet: ipheth: fix racing condition (bnc#1012628).
- tracing: Prevent hist_field_var_ref() from accessing NULL
  tracing_map_elts (bnc#1012628).
- selftests/timers: Add missing fflush(stdout) calls
  (bnc#1012628).
- selftests: fib_rule_tests: fix local IPv4 address typo
  (bnc#1012628).
- libnvdimm: Fix compilation warnings with W=1 (bnc#1012628).
- drm/amdgpu: keep stolen memory on picasso (bnc#1012628).
- scsi: bnx2fc: fix incorrect cast to u64 on shift operation
  (bnc#1012628).
- scsi: myrs: Fix uninitialized variable (bnc#1012628).
- platform/x86: pmc_atom: Add several Beckhoff Automation boards
  to critclk_systems DMI table (bnc#1012628).
- platform/x86: pmc_atom: Add Lex 3I380D industrial PC to
  critclk_systems DMI table (bnc#1012628).
- nvme: fix memory leak for power latency tolerance (bnc#1012628).
- nvme: release namespace SRCU protection before performing
  controller ioctls (bnc#1012628).
- nvme: merge nvme_ns_ioctl into nvme_ioctl (bnc#1012628).
- nvme: remove the ifdef around nvme_nvm_ioctl (bnc#1012628).
- nvme: fix srcu locking on error return in nvme_get_ns_from_disk
  (bnc#1012628).
- nvme-pci: Fix controller freeze wait disabling (bnc#1012628).
- selftests/bpf: fix bpf_get_current_task (bnc#1012628).
- tools/bpftool: move set_max_rlimit() before
  __bpf_object__open_xattr() (bnc#1012628).
- arm64/mm: Inhibit huge-vmap with ptdump (bnc#1012628).
- bpf, tcp: correctly handle DONT_WAIT flags and timeo == 0
  (bnc#1012628).
- enetc: Fix NULL dma address unmap for Tx BD extensions
  (bnc#1012628).
- net: macb: fix error format in dev_err() (bnc#1012628).
- arm64: Print physical address of page table base in show_pte()
  (bnc#1012628).
- scsi: lpfc: add check for loss of ndlp when sending RRQ
  (bnc#1012628).
- scsi: lpfc: correct rcu unlock issue in lpfc_nvme_info_show
  (bnc#1012628).
- scsi: lpfc: resolve lockdep warnings (bnc#1012628).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (bnc#1012628).
- scsi: qedi: remove memset/memcpy to nfunc and use func instead
  (bnc#1012628).
- scsi: qla2xxx: Add cleanup for PCI EEH recovery (bnc#1012628).
- bpf: sockmap fix msg->sg.size account on ingress skb
  (bnc#1012628).
- bpf: sockmap remove duplicate queue free (bnc#1012628).
- bpf: sockmap, only stop/flush strp if it was enabled at some
  point (bnc#1012628).
- drivers/perf: arm_spe: Don't error on high-order pages for
  aux buf (bnc#1012628).
- f2fs: fix to avoid accessing xattr across the boundary
  (bnc#1012628).
- Drivers: misc: fix out-of-bounds access in function
  param_set_kgdbts_var (bnc#1012628).
- Revert "ALSA: seq: Protect in-kernel ioctl calls with mutex"
  (bnc#1012628).
- ALSA: seq: Fix race of get-subscription call vs port-delete
  ioctls (bnc#1012628).
- ALSA: seq: Protect in-kernel ioctl calls with mutex
  (bnc#1012628).
- x86/uaccess, kcov: Disable stack protector (bnc#1012628).
- drm/i915/dmc: protect against reading random memory
  (bnc#1012628).
- drm/i915: Fix per-pixel alpha with CCS (bnc#1012628).
- drm/i915/dsi: Use a fuzzy check for burst mode clock check
  (bnc#1012628).
- drm/i915/sdvo: Implement proper HDMI audio support for SDVO
  (bnc#1012628).
- drm/amdgpu/{uvd,vcn}: fetch ring's read_ptr after alloc
  (bnc#1012628).
- ASoC: soc-core: fixup references at soc_cleanup_card_resources()
  (bnc#1012628).
- ASoC: fsl_asrc: Fix the issue about unsupported rate
  (bnc#1012628).
- ASoC: cs42xx8: Add regcache mask dirty (bnc#1012628).
- cgroup: Use css_tryget() instead of css_tryget_online() in
  task_get_css() (bnc#1012628).
- bcache: only set BCACHE_DEV_WB_RUNNING when cached device
  attached (bnc#1012628).
- bcache: fix stack corruption by PRECEDING_KEY() (bnc#1012628).
- i2c: acorn: fix i2c warning (bnc#1012628).
- Smack: Restore the smackfsdef mount option and add missing
  prefixes (bnc#1012628).
- iommu/arm-smmu: Avoid constant zero in TLBI writes
  (bnc#1012628).
- media: dvb: warning about dvb frequency limits produces too
  much noise (bnc#1012628).
- ptrace: restore smp_rmb() in __ptrace_may_access()
  (bnc#1012628).
- signal/ptrace: Don't leak unitialized kernel memory with
  PTRACE_PEEK_SIGINFO (bnc#1012628).
- mm/vmscan.c: fix trying to reclaim unevictable LRU page
  (bnc#1012628).
- fs/ocfs2: fix race in ocfs2_dentry_attach_lock() (bnc#1012628).
- mm/list_lru.c: fix memory leak in __memcg_init_list_lru_node
  (bnc#1012628).
- io_uring: fix memory leak of UNIX domain socket inode
  (bnc#1012628).
- libata: Extend quirks for the ST1000LM024 drives with NOLPM
  quirk (bnc#1012628).
- selinux: fix a missing-check bug in selinux_sb_eat_lsm_opts()
  (bnc#1012628).
- selinux: fix a missing-check bug in selinux_add_mnt_opt( )
  (bnc#1012628).
- selinux: log raw contexts as untrusted strings (bnc#1012628).
- ALSA: firewire-motu: fix destruction of data for isochronous
  resources (bnc#1012628).
- ALSA: hda/realtek - Update headset mode for ALC256
  (bnc#1012628).
- ALSA: ice1712: Check correct return value to snd_i2c_sendbytes
  (EWS/DMX 6Fire) (bnc#1012628).
- ALSA: oxfw: allow PCM capture for Stanton SCS.1m (bnc#1012628).
- Revert "ALSA: hda/realtek - Improve the headset mic for Acer
  Aspire laptops" (bnc#1012628).
- HID: wacom: Sync INTUOSP2_BT touch state after each frame if
  necessary (bnc#1012628).
- HID: wacom: Correct button numbering 2nd-gen Intuos Pro over
  Bluetooth (bnc#1012628).
- HID: wacom: Send BTN_TOUCH in response to INTUOSP2_BT eraser
  contact (bnc#1012628).
- HID: wacom: Don't report anything prior to the tool entering
  range (bnc#1012628).
- HID: wacom: Don't set tool type until we're in range
  (bnc#1012628).
- HID: multitouch: handle faulty Elo touch device (bnc#1012628).
- Revert "HID: Increase maximum report size allowed by
  hid_field_extract()" (bnc#1012628).
- HID: input: fix assignment of .value (bnc#1012628).
- HID: input: make sure the wheel high resolution multiplier is
  set (bnc#1012628).
- nouveau: Fix build with CONFIG_NOUVEAU_LEGACY_CTX_SUPPORT
  disabled (bnc#1012628).
- drm/nouveau: add kconfig option to turn off nouveau legacy
  contexts. (v3) (bnc#1012628).
- commit c3db4a3
- Update config files.
  Enable SECURITY_YAMA to allow protection against ptrace attacks
  (bnc#1128245).
- commit fb39868
- Update config files.
  Set HARDENED_USERCOPY=y (bnc#1127808). This can be disabled on the
  commandline using hardened_usercopy=n.
- commit 04b86aa

==== okteta ====
Version update (0.26.1 -> 0.26.2)
Subpackages: libKasten4 libOkteta3 libkasten-lang libokteta-lang okteta-data okteta-lang

- Update to 0.26.2
  * Fixed: replacing content backwards no longer skips some content
  * Fixed: "From Cursor" in search dialog now disabled with "In
    Selection" on
  * Fixed: "In Selection" disabled now if there is nothing selected
  * Fixed: search dialog now modal to prevent unsupported
    interaction with app
  * Improved: maximum array size in structures extended to 64K
    (kde#371790)
  * Translations improved (ko)

==== xfce4-panel-plugin-cpugraph ====
Version update (1.0.91 -> 1.1.0)
Subpackages: xfce4-panel-plugin-cpugraph-lang

- Update to version 1.1.0
  * Stable release of cpugraph-plugin, featuring only updated
    translations. For more details on the GTK 3 Port and other
    improvements, please refer to the release notes of 1.0.90
    and 1.0.91.