Packages changed: Mesa (19.0.3 -> 19.0.4) Mesa-drivers (19.0.3 -> 19.0.4) adobe-sourcecodepro-fonts apache2 argyllcms cdrdao dhcp ffmpeg-4 gconf2 gnome-builder (3.32.1 -> 3.32.2) gnome-shell icu iio-sensor-proxy (2.5 -> 2.6) libqt5-qtwebkit libreoffice librsvg (2.44.13 -> 2.44.14) mercurial (4.9.1 -> 5.0) mozilla-nspr (4.20 -> 4.21) mozilla-nss (3.42.1 -> 3.43) netpbm (10.85.0 -> 10.86.3) openldap2 perl-YAML (1.28 -> 1.29) postfix protobuf-c python-ecdsa (0.13 -> 0.13.2) python-pip (19.0.3 -> 19.1.1+git.1557777841.63878672) qemu qemu-linux-user rubygem-autoprefixer-rails (9.5.1 -> rubygem-jbuilder (2.8.0 -> 2.9.1) strace suse-module-tools tbb (2019_20190320 -> 2019_20190410) vim (8.1.1282 -> 8.1.1330) xen (4.12.0_10 -> 4.12.0_12) === Details === ==== Mesa ==== Version update (19.0.3 -> 19.0.4) Subpackages: Mesa-dri-devel Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - Update to 19.0.4 * It's been a pretty active release, especially for how late in the cyle we are. Radv was the busiest component, but there were also a few changes for intel, radeonsi, some core vulkan work, and a little bit of other stuff here and there. ==== Mesa-drivers ==== Version update (19.0.3 -> 19.0.4) Subpackages: Mesa-dri Mesa-dri-nouveau Mesa-gallium Mesa-libva libvdpau_nouveau libvdpau_r300 libvdpau_r600 libvdpau_radeonsi libvulkan_intel libvulkan_radeon libxatracker2 - Update to 19.0.4 * It's been a pretty active release, especially for how late in the cyle we are. Radv was the busiest component, but there were also a few changes for intel, radeonsi, some core vulkan work, and a little bit of other stuff here and there. ==== adobe-sourcecodepro-fonts ==== - Remove TTF files because better OTF files have been installed ==== apache2 ==== Subpackages: apache2-devel apache2-doc apache2-example-pages apache2-prefork apache2-utils - revive apache-22-24-upgrade [bsc#1134294] (internal) - added sources + apache-22-24-upgrade ==== argyllcms ==== - Disable LTO (boo#1133108). ==== cdrdao ==== - Run autoreconf to fix build with LTO (bsc#1133112) ==== dhcp ==== Subpackages: dhcp-client dhcp-doc dhcp-relay dhcp-server - Add workaround to require insserv-compat until the package is converted to full systemd units (boo#1133632). ==== ffmpeg-4 ==== Subpackages: libavcodec58 libavdevice58 libavfilter7 libavformat58 libavresample4 libavutil56 libpostproc55 libswresample3 libswscale5 - Enable LTO for all except i586 (boo#1133123). ==== gconf2 ==== Subpackages: gconf-polkit gconf2-lang - Move RPM macros to %_rpmmacrodir. ==== gnome-builder ==== Version update (3.32.1 -> 3.32.2) Subpackages: gnome-builder-doc gnome-builder-lang gnome-builder-plugin-jedi gnome-builder-plugin-jhbuild gnome-builder-plugin-vala-pack - Update to version 3.32.2: + Glade design view improvements. + Improve CFLAGS and CXXFLAGS discovery with compile_commands.json when a direct match is not found (such as with headers). + Improve symlink detection warning. + Fix block selection in terminals. + Enable VTE hyperlinks feature. + NPM build system bug fixes and improvements. + The diagnostic manager now properly tracks changes to a buffers configured source language. This will improve diagnostic detection in some situations. + rofiles-fuse and flatpak-builder will attempt to retire their corresponding host processes when flatpak is in use. + Unit tests will now properly run when uninstalled. + The unit tests panel now properly scrolls when a large amount of content is provided to the PTY. + The unit tests panel now allows for cancelling an ongoing unit test. + The file monitor now properly detects file changes when no version control is in use. + The clang plugin now discovers the location of the C++ standard includes. + Project template improvements. + Folder selection is fixed when cloning a repository. + menus.ui no longer is opened with the Glade design view by default. + "Open in Terminal" will now properly open a terminal from the host system instead of expecting flatpak bundling. + Updated documentation. + Updated translations. ==== gnome-shell ==== Subpackages: gnome-shell-calendar gnome-shell-lang - Add gnome-shell-do-not-chain-up-to-parent-allocate.patch: Don't chain up to parent's allocate, resolving Topicon Plus extension high cpu consumption (glgo#GNOME/gnome-shell#1054). ==== icu ==== Subpackages: libicu-suse64_2 libicu64_2-ledata - Add 075cefb2e21f57f4cac1bc2868e93dd1b8c077cc.patch to fix a regression with the C.UTF-8 locale ==== iio-sensor-proxy ==== Version update (2.5 -> 2.6) - Update to version 2.6: + Add support for mount matrices coming from the kernel itself, checking those more thoroughly for validity. On devices with multiple accelerometers, the ones in the base are now ignored. + Improve/fix support for sensors with uncommon formats. + Fix a couple of possible crashes and memory leaks. - Minor specfile cleanups using spec-cleaner. ==== libqt5-qtwebkit ==== Subpackages: libQt5WebKit5 libQt5WebKit5-imports libQt5WebKitWidgets5 - Disable LTO (boo#1135212). ==== libreoffice ==== Subpackages: libreoffice-base libreoffice-base-drivers-firebird libreoffice-calc libreoffice-draw libreoffice-filters-optional libreoffice-gnome libreoffice-gtk3 libreoffice-icon-themes libreoffice-impress libreoffice-l10n-cs libreoffice-l10n-da libreoffice-l10n-de libreoffice-l10n-el libreoffice-l10n-en libreoffice-l10n-en_GB libreoffice-l10n-es libreoffice-l10n-fr libreoffice-l10n-hu libreoffice-l10n-it libreoffice-l10n-ja libreoffice-l10n-pl libreoffice-l10n-pt_BR libreoffice-l10n-ru libreoffice-l10n-zh_CN libreoffice-l10n-zh_TW libreoffice-mailmerge libreoffice-math libreoffice-pyuno libreoffice-qt5 libreoffice-writer libreofficekit - LO-L3: Slide deck compression doesn't, hmm, compress too much * bsc1127760.patch - LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint) * bsc1124869.patch - LO-L3: Image from PPTX shown in a square, not a circle * bsc1121874.patch - Strip lto from %_lto_cflags as the project has --enable-lto option - Fake the epoch to make zip files reproducible ==== librsvg ==== Version update (2.44.13 -> 2.44.14) Subpackages: gdk-pixbuf-loader-rsvg librsvg-2-2 rsvg-thumbnailer typelib-1_0-Rsvg-2_0 - Update to version 2.44.14: + Fix glgo#GNOME/librsvg#425: Don't fail parsing if the system's locale is broken. + Fix glgo#GNOME/librsvg#438, glgo#GNOME/librsvg#443: Don't create intermediate raster surfaces unless absolutely needed. This was causing blurred output for SVGs from Inkscape and Illustrator, since they include an "enable-background" property even when there are no filters in use. + Fix glgo#GNOME/librsvg#443: Fix blurry output when enable-background is used without filters. + Fix glgo#GNOME/librsvg#455: Fix rounding error on i386. + Check for Cairo errors when constructing paths. ==== mercurial ==== Version update (4.9.1 -> 5.0) Subpackages: mercurial-lang - Mercurial 5.0 This is a regularly-scheduled quarterly feature release. + New Features * Python 3 Support (Beta) * `ui.relative-paths` option for getting relative path output from most commands. This is enabled when `ui.tweakdefaults` is enabled. * `expectsize()` revset errors out if revset has unexpected number of elements. * `config()` template function for getting a config value. * `{negrev}` template keyword shows the negative revision number. This is convenient because it is usually shorter than the positive number, but note that it is less stable. * `hg uncommit` now has an `--allow-dirty-working-copy` option. * `hg shelve` now has `--keep` option, which shelves but also leaves the working directory unchanged. * `hg diff` will now include specified files in subrepos. * `hg recover` now has a `--no-verify` option + Other Improvements * Improved color scheme for histedit's curses interface, making it more consistent with the curses hunk selector. + Bug Fixes * Histedit's curse interface has improved support for non ascii characters. + Backwards Compatibility Changes * color: change color of grep.rev label (BC) * commit: if interactive, look elsewhere for whitespace settings (BC) * diff: make sure we output stat even when --git is not passed (issue4037) (BC) * uncommit: abort if an explicitly given file cannot be uncommitted (BC) ==== mozilla-nspr ==== Version update (4.20 -> 4.21) - update to version 4.21 * Use MAP_SHARED for read-only file mappings on MacOS and Android * Changed prbit.h to use builtin function on aarch64 * Test program build fixes * Minor fixes to support unified builds * Update library copyright notices * Removed Gonk/B2G references ==== mozilla-nss ==== Version update (3.42.1 -> 3.43) Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs mozilla-nss-tools - update to NSS 3.43 * required by Firefox 67.0 New functions * HASH_GetHashOidTagByHashType - convert type HASH_HashType to type SECOidTag * SSL_SendCertificateRequest - allow server to request post-handshake client authentication. To use this both peers need to enable the SSL_ENABLE_POST_HANDSHAKE_AUTH option. Note that while the mechanism is present, post-handshake authentication is currently not TLS 1.3 compliant due to bug 1532312 Notable changes * The following CA certificates were Added: - emSign Root CA - G1 - emSign ECC Root CA - G3 - emSign Root CA - C1 - emSign ECC Root CA - C3 - Hongkong Post Root CA 3 Bugs fixed * Improve Gyp build system handling (bmo#1528669, bmo#1529308) * Improve NSS S/MIME tests for Thunderbird (bmo#1529950, bmo#1521174) * If Docker isn't installed, try running a local clang-format as a fallback (bmo#1530134) * Enable FIPS mode automatically if the system FIPS mode flag is set (bmo#1531267) * Add a -J option to the strsclnt command to specify sigschemes (bmo#1528262) * Add manual for nss-policy-check (bmo#1513909) * Fix a deref after a null check in SECKEY_SetPublicValue (bmo#1531074) * Properly handle ESNI with HRR (bmo#1517714) * Expose HKDF-Expand-Label with mechanism (bmo#1529813) * Align TLS 1.3 HKDF trace levels (bmo#1535122) * Use getentropy on compatible versions of FreeBSD (bmo#1530102) ==== netpbm ==== Version update (10.85.0 -> 10.86.3) Subpackages: libnetpbm11 - asan_build: build ASAN included - debug_build: build more suitable for debugging - added patches neccessary for running with ASAN + netpbm-asan.patch - version update to 10.86.3 * pnmtopng: Fix bug: Defaults to no filters. Should be all filters. Effect is larger PNG output. Broken after Netpbm 10.26 (January 2005) but no later than Netpbm 10.35 (August 2006). * pnmtopng: Fix bug: Doesn't allow multiple filter options. Broken after Netpbm 10.26 (January 2005) but no later than Netpbm 10.35 (August 2006). * pnmcrop: Don't allow -borderfile with -reportXXX. It doesn't work. * pnmcrop: fix bug: -bgcolor doesn't work. Always present (-bgcolor was introduced in Netpbm 10.86 (March 2019)). * pnmcrop: fix bug: incorrect identification of background with - bgcolor and PBM or PGM image. Always present (-bgcolor was introduced in Netpbm 10.86 (March 2019)). * Add pamfind. * Add pambrighten. * Add pamhue. * pnmcrop: Add -bg-color, bg-corner, -reportfull, -reportsize, - blank-image . * pamtopng: Add -interlace . * pamenlarge: Add -scale, -xscale, -yscale . * pamenlarge: Much faster for PBM with xscale factor above 10; slightly faster for xscale factor 2-10. * pamfile: Add -machine and -size . * pamscale: Add -reportonly * pamstretch-gen: Add -quiet, -plain. * pamstretch-gen: Use -dropedge on the 'pamstretch' piece for better looking output. * pamstretch: Accept scale factor of 1 as a parameter (already was accepted with -xscale and -yscale options). * pamstretch: Don't mess with edge when scale factor is 1, regardless of -dropedge and -blackedge. * ppmwheel: Add -huevalue, -huesaturation, -maxval . * various: Fix unnormalizing code so a value exactly between two sample values rounds consistently up. Affects many programs. * pstopnm: Fix bug: -textalphabits has no effect. Always broken. (-textalphabits was new in Netpbm 10.53 (December 2010)). * pamtopng: Fix sBit chunk, bit shift value for 1-, 2-, and 4-bit- per-sample images. Always broken (Pamtopng was new in Netpbm 10.71 (June 2015)). * pamtopng: Fix buffer overrun. Always broken (Pamtopng was new in Netpbm 10.71 (June 2015)). * pnmtopng: fix bug: -interlace ignored. Broken in 10.55 (June 2011). pamstretch: Reject very large scale factors instead of producing incorrect output. * ppmbrighten: Fix crash with -normalize when there is only one intensity in the image. Always broken - Ppmbrighten was new in the first Netpbm release in 1991. * ppmdraw: Fix bug: 'setlinetype nodiag' says invalid type. Always broken. (Ppmdraw was new in Netpbm 10.29 (August 2005)). - modified patches % netpbm-gcc-warnings.patch (extended) ==== openldap2 ==== Subpackages: libldap-2_4-2 libldap-2_4-2-32bit libldap-data openldap2-client openldap2-devel - bsc#1111388 - incorrect post script call causes tmpfiles create not to be run. ==== perl-YAML ==== Version update (1.28 -> 1.29) - updated to 1.29 see /usr/share/doc/packages/perl-YAML/Changes 1.29 Sat 11 May 2019 10:26:54 AM CEST - Fix regex for alias to match the one for anchors (PR#214 TINITA) ==== postfix ==== Subpackages: postfix-doc - bsc#1104543 config.postfix does not start tlsmgr in when using POSTFIX_SMTP_TLS_CLIENT="must". Applyed the proposed patch. ==== protobuf-c ==== - Disable LTO (boo#1133277). ==== python-ecdsa ==== Version update (0.13 -> 0.13.2) Subpackages: python2-ecdsa python3-ecdsa - update to 0.13.2 - enable tests - fix requires * python packaging fixes ==== python-pip ==== Version update (19.0.3 -> 19.1.1+git.1557777841.63878672) - Update to version 19.1.1+git.1557777841.63878672: * Update news file to match usual style * fix-5963: assert error message * Simplify CandidateEvaluator.evaluate_link(). * Fix 6486 mac gitignore (#6487) * Store instances in the VcsSupport registry instead of classes. * Remove unused cls argument from VcsSupport.unregister(). * fix-5963: Add news file * fix-5963: fail elegantly on missing name or section in config set / unset * Remove unnecessary slices. * Fix typo. - Switch to multibuild, so testing is separate from the building of the package itself. - Update to version 19.1.1+git.1557521541.a731e7e3: * Docs: capitalize "URL" * Upgrade Sphinx version for Read the Docs (#6477) * Upwrap import * Remove utils/'s dependence on the current environment. * Improve import error handling Fix --no-index usage Fix missing type annotation type * Rename _link_package_versions() to evaluate_link(). * Move _link_package_versions() to CandidateEvaluator. * Refine return type of _package_versions() and find_all_candidates(). * Fix mismerged import * Issue #5948: Enable keyring support * Move run_with_log_command() after run_stderr_with_prefix(). * Change to never allow logging errors during tests. * Add failing test. * Respect --global-option and --install-option for VCS installs. - Start using upstream git checkout instead of the released tarballs so we can get tests/ directory (gh#pypa/pip#6258). - Enable tests. - Update to 19.1.1: - Restore pyproject.toml handling to how it was with pip 19.0.3 to prevent the need to add --no-use-pep517 when installing in editable mode. (#6434) - Fix a regression that caused @ to be quoted in pypiserver links. This interfered with parsing the revision string from VCS urls. (#6440) - Configuration files may now also be stored under sys.prefix (#5060) - Avoid creating an unnecessary local clone of a Bazaar branch when exporting. (#5443) - Include in pip's User-Agent string whether it looks like pip is running under CI. (#5499) - A custom (JSON-encoded) string can now be added to pip's User-Agent using the PIP_USER_AGENT_USER_DATA environment variable. (#5549) - For consistency, passing --no-cache-dir no longer affects whether wheels will be built. In this case, a temporary directory is used. (#5749) - Command arguments in subprocess log messages are now quoted using shlex.quote(). (#6290) - Prefix warning and error messages in log output with WARNING and ERROR. (#6298) - Using --build-options in a PEP 517 build now fails with an error, rather than silently ignoring the option. (#6305) - Error out with an informative message if one tries to install a pyproject.toml-style (PEP 517) source tree using --editable mode. (#6314) - When downloading a package, the ETA and average speed now only update once per second for better legibility. (#6319) - The stdout and stderr from VCS commands run by pip as subprocesses (e.g. git, hg, etc.) no longer pollute pip's stdout. (#1219) - Fix handling of requests exceptions when dependencies are debundled. (#4195) - Make pip's self version check avoid recommending upgrades to prereleases if the currently-installed version is stable. (#5175) - Fixed crash when installing a requirement from a URL that comes from a dependency without a URL. (#5889) - Improve handling of file URIs: correctly handle file://localhost/... and don't try to use UNC paths on Unix. (#5892) - Fix utils.encoding.auto_decode() LookupError with invalid encodings. utils.encoding.auto_decode() was broken when decoding Big Endian BOM byte-strings on Little Endian or vice versa. (#6054) - Fix incorrect URL quoting of IPv6 addresses. (#6285) - Redact the password from the extra index URL when using pip - v. (#6295) - The spinner no longer displays a completion message after subprocess calls not needing a spinner. It also no longer incorrectly reports an error after certain subprocess calls to Git that succeeded. (#6312) - Fix the handling of editable mode during installs when pyproject.toml is present but PEP 517 doesn't require the source tree to be treated as pyproject.toml-style. (#6370) - Fix NameError when handling an invalid requirement. (#6419) - Make dashes render correctly when displaying long options like --find-links in the text. (#6422) ==== qemu ==== Subpackages: qemu-arm qemu-block-curl qemu-block-dmg qemu-block-gluster qemu-block-iscsi qemu-block-nfs qemu-block-rbd qemu-block-ssh qemu-extra qemu-guest-agent qemu-ipxe qemu-ksm qemu-kvm qemu-lang qemu-ppc qemu-s390 qemu-seabios qemu-sgabios qemu-tools qemu-ui-curses qemu-ui-gtk qemu-ui-sdl qemu-vgabios qemu-x86 - Yet another gcc9 related code fix (bsc#1121464) 0044-hw-intc-exynos4210_gic-provide-more.patch - Patch queue updated from git:// opensuse-4.0 - Switch to now upstreamed version of patch and add one more gcc9 related patch * Patches renamed: 0041-qxl-fix-Waddress-of-packed-member.patch - > 0041-qxl-avoid-unaligned-pointer-reads-w.patch 0042-libvhost-user-fix-Waddress-of-packe.patch - Add x86 cpu feature "md-clear" (CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091 bsc#1111331) 0043-target-i386-define-md-clear-bit.patch - Patch queue updated from git:// opensuse-4.0 - Correct logic of which ipxe patches get included based on suse_version. We were wrongly excluding a gcc9 related patch for example - Switch to now upstreamed version of some patches * Patches renamed: 0036-util-qemu-sockets-Fix-GCC-9-build-w.patch - > 0036-sockets-avoid-string-truncation-war.patch 0039-linux-user-uname-Fix-GCC-9-build-wa.patch - > 0039-linux-user-avoid-string-truncation-.patch - Patch queue updated from git:// opensuse-4.0 - Create /usr/share/qemu/firmware and /etc/qemu/firmware directories in support of the firmware descriptor feature now in use as of libvirt v5.2 ==== qemu-linux-user ==== - Patch queue updated from git:// opensuse-4.0 * Patches added: 0044-hw-intc-exynos4210_gic-provide-more.patch - Patch queue updated from git:// opensuse-4.0 * Patches dropped: 0041-qxl-fix-Waddress-of-packed-member.patch * Patches added: 0041-qxl-avoid-unaligned-pointer-reads-w.patch 0042-libvhost-user-fix-Waddress-of-packe.patch 0043-target-i386-define-md-clear-bit.patch - Patch queue updated from git:// opensuse-4.0 * Patches renamed: 0036-util-qemu-sockets-Fix-GCC-9-build-w.patch - > 0036-sockets-avoid-string-truncation-war.patch 0039-linux-user-uname-Fix-GCC-9-build-wa.patch - > 0039-linux-user-avoid-string-truncation-.patch ==== rubygem-autoprefixer-rails ==== Version update (9.5.1 -> - update to version see installed [#]# * Fix register_postprocessor' for nil:NilClass error. * Update Can I Use data. ==== rubygem-jbuilder ==== Version update (2.8.0 -> 2.9.1) - update to version 2.9.1 see installed 2.9.1 - ---- * Respect JSON encoding customizations 2.9.0 - ---- * Fix passing object with partial without locals * Fix deprecation warning in Rails 6.0 * Use quotes consistently in generated templates * Allow omitting timestamps from generated partials * Respect changing scaffold generator * Use a symbolic default format for Rails 6.0 forward compatibility * Drop MultiJSON in favor of Ruby standard library JSON ==== strace ==== - Ignore testsuite failures ==== suse-module-tools ==== - Only ship RPM macros up to suse_version 1500: after that, the macros can be found in the rpm-config-SUSE package. - Move RPM macros to %_rpmmacrodir. ==== tbb ==== Version update (2019_20190320 -> 2019_20190410) - Update to version 2019_U6 * Added support for enqueuing tbb::task into tbb::task_arena ( * Improved support for allocator propagation on concurrent_hash_map assigning and swapping. * Improved scalable_allocation_command cleanup operations to release more memory buffered by the calling thread. * Separated allocation of small and large objects into distinct memory regions, which helps to reduce excessive memory caching inside the TBB allocator. - Disable python2 support ==== vim ==== Version update (8.1.1282 -> 8.1.1330) Subpackages: gvim vim-data vim-data-common - Updated to version 8.1.1330, fixes the following problems - refreshed disable-unreliable-tests.patch * Running make in src/po leaves LINGUAS file behind. (Ken Takata) * Delaying half a second after the top-bot message. * Detecting *.tmpl as htmlcheetah is outdated. * Test17 is old style. * Running tests leaves XTest_tabpage_cmdheight file behind. * Cannot build with +eval but without +mouse. * Search stats don't show for mapped command. * May not have enough space to add "W" to search stats. * .hgignore and .gitignore are either distributed or in git, not both. * Not easy to change directory and restore. * Invalid command line arguments not tested. * When vimrun.exe does not exist external command may fail. * Crash when using invalid command line argument. * Invalid argument test fails without GTK. * Invalid argument test fails without X clipboard. * "extends" from 'listchars' is used when 'list' is off. (Hiroyuki Yoshinaga) * In a terminal 'ballooneval' does not work right away. * When compiled with VIMDLL some messages are not shown. * v:beval_text is not tested in Visual mode. * Not possible to hide a balloon. * There is no easy way to manipulate environment variables. * Borland support is outdated and doesn't work. * Cannot reconnect to the X server after it restarted. * The Normal highlight is not defined when compiled with GUI. * Test for Normal highlight fails on MS-Windows GUI. * Named function arguments are never optional. * Aborting an autocmd with an exception is not tested. * Coverity warning for using uninitialized variable. * Warnings for using localtime() and ctime(). * There is always a delay if a termrequest is never answered. * Duplicated localtime() call. * Output from Travis can be improved. * Code for text changes is in a "misc" file. * Computing function length name in many places. * It is not possible to track changes to a buffer. * No docs or tests for listener functions. * Cygwin makefile is not nicely indented. * 'mouse' option is reset when using GPM mouse. * Stray comma in VMS makefile. * Cannot build with +eval but without +channel and +timers. (John Marriott) * No test for listener with partial. * Unnecessary scroll after horizontal split. * No test for listener with undo operation. * Plans for popup window support are spread out. * Using bold attribute in terminal changes the color. (Jason Franklin) ==== xen ==== Version update (4.12.0_10 -> 4.12.0_12) Subpackages: xen-libs xen-tools xen-tools-domU - Disable LTO (boo#1133296). - Remove arm32 from ExclusiveArch to fix build - bsc#1111331 - VUL-0: CPU issues Q2 2019 aka "Group 4" xsa297-0a.patch xsa297-0b.patch xsa297-0c.patch xsa297-0d.patch xsa297-1.patch xsa297-2.patch xsa297-3.patch - Update 5cab1f66-timers-fix-memory-leak-with-cpu-plug.patch and drop 5cac6219-xen-cpu-Fix-ARM-build-following-cs-597fbb8.patch Refresh 5cac6cba-vmx-Fixup-removals-of-MSR-load-save-list-entries.patch