Packages changed:
  MicroOS-release (20240411 -> 20240412)
  gnome-text-editor (46.0 -> 46.1)
  grep
  gupnp
  jack
  kernel-source (6.8.4 -> 6.8.5)
  liblouis
  openSUSE-build-key
  pam (1.6.0 -> 1.6.1)
  pam-config (2.11 -> 2.11+git.20240411)
  pam-full-src (1.6.0 -> 1.6.1)
  postfix
  update-alternatives (1.22.5 -> 1.22.6)

=== Details ===

==== MicroOS-release ====
Version update (20240411 -> 20240412)
Subpackages: MicroOS-release-appliance MicroOS-release-dvd

- automatically generated by openSUSE-release-tools/pkglistgen

==== gnome-text-editor ====
Version update (46.0 -> 46.1)
Subpackages: gnome-text-editor-lang

- Update to version 46.1:
  + Remove DBusActicatable=true from the .desktop file to fix an
    issue where you could spawn Text Editor via D-Bus and not have
    the session restored at startup.
  + AppData fixes.
  + Updated translations.
- Drop data-desktop-disable-DBusActivatable.patch: fixed upstream.

==== grep ====
Subpackages: grep-lang

- restore texinfo macros for SLE15

==== gupnp ====

- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]

==== jack ====

- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]

==== kernel-source ====
Version update (6.8.4 -> 6.8.5)

- gcc-plugins/stackleak: Avoid .head.text section (git-fixes).
- commit 542f698
- Linux 6.8.5 (bsc#1012628).
- x86: set SPECTRE_BHI_ON as default (bsc#1012628).
- KVM: x86: Add BHI_NO (bsc#1012628).
- x86/bhi: Mitigate KVM by default (bsc#1012628).
- x86/bhi: Add BHI mitigation knob (bsc#1012628 bsc#1217339 CVE-2024-2201).
- Update config files (set SPECTRE_BHI_ON=y which is the default later).
- x86/bhi: Enumerate Branch History Injection (BHI) bug
  (bsc#1012628).
- x86/bhi: Define SPEC_CTRL_BHI_DIS_S (bsc#1012628).
- x86/bhi: Add support for clearing branch history at syscall
  entry (bsc#1012628).
- x86/syscall: Don't force use of indirect calls for system calls
  (bsc#1012628).
- x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file
  (bsc#1012628).
- x86/efistub: Remap kernel text read-only before dropping NX
  attribute (bsc#1012628).
- x86/sev: Move early startup code into .head.text section
  (bsc#1012628).
- x86/sme: Move early SME kernel encryption handling into
  .head.text (bsc#1012628).
- x86/boot: Move mem_encrypt= parsing to the decompressor
  (bsc#1012628).
- efi/libstub: Add generic support for parsing mem_encrypt=
  (bsc#1012628).
- bpf: support deferring bpf_link dealloc to after RCU grace
  period (bsc#1012628).
- bpf: put uprobe link's path and task in release callback
  (bsc#1012628).
- Revert "x86/mpparse: Register APIC address only once"
  (bsc#1012628).
- drm/xe: Rework rebinding (bsc#1012628).
- drm/xe: Use ring ops TLB invalidation for rebinds (bsc#1012628).
- drm/i915/gt: Enable only one CCS for compute workload
  (bsc#1012628).
- drm/i915/gt: Do not generate the command streamer for all the
  CCS (bsc#1012628).
- drm/i915/gt: Disable HW load balancing for CCS (bsc#1012628).
- drm/i915/dp: Fix the computation for compressed_bpp for DISPLAY
  < 13 (bsc#1012628).
- drm/i915/mst: Reject FEC+MST on ICL (bsc#1012628).
- drm/i915/mst: Limit MST+DSC to TGL+ (bsc#1012628).
- smb: client: fix potential UAF in
  cifs_signal_cifsd_for_reconnect() (bsc#1012628).
- smb: client: fix potential UAF in smb2_is_network_name_deleted()
  (bsc#1012628).
- smb: client: fix potential UAF in is_valid_oplock_break()
  (bsc#1012628).
- smb: client: fix potential UAF in smb2_is_valid_lease_break()
  (bsc#1012628).
- smb: client: fix potential UAF in smb2_is_valid_oplock_break()
  (bsc#1012628).
- smb: client: fix potential UAF in cifs_dump_full_key()
  (bsc#1012628).
- smb: client: fix potential UAF in cifs_stats_proc_show()
  (bsc#1012628).
- smb: client: fix potential UAF in cifs_stats_proc_write()
  (bsc#1012628).
- smb: client: fix potential UAF in cifs_debug_files_proc_show()
  (bsc#1012628).
- smb3: retrying on failed server close (bsc#1012628).
- smb: client: serialise cifs_construct_tcon() with
  cifs_mount_mutex (bsc#1012628).
- smb: client: handle DFS tcons in cifs_construct_tcon()
  (bsc#1012628).
- smb: client: refresh referral without acquiring refpath_lock
  (bsc#1012628).
- smb: client: guarantee refcounted children from parent session
  (bsc#1012628).
- smb: client: fix UAF in smb2_reconnect_server() (bsc#1012628).
- riscv: process: Fix kernel gp leakage (bsc#1012628).
- riscv: Fix spurious errors from __get/put_kernel_nofault
  (bsc#1012628).
- s390/entry: align system call table on 8 bytes (bsc#1012628).
- selftests/mm: include strings.h for ffsl (bsc#1012628).
- mm/secretmem: fix GUP-fast succeeding on secretmem folios
  (bsc#1012628).
- arm64/ptrace: Use saved floating point state type to determine
  SVE layout (bsc#1012628).
- riscv: Fix vector state restore in rt_sigreturn() (bsc#1012628).
- aio: Fix null ptr deref in aio_complete() wakeup (bsc#1012628).
- perf/x86/intel/ds: Don't clear ->pebs_data_cfg for the last
  PEBS event (bsc#1012628).
- x86/coco: Require seeding RNG with RDRAND on CoCo systems
  (bsc#1012628).
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
  (bsc#1012628).
- x86/mm/pat: fix VM_PAT handling in COW mappings (bsc#1012628).
- of: module: prevent NULL pointer dereference in vsnprintf()
  (bsc#1012628).
- of: dynamic: Synchronize of_changeset_destroy() with the
  devlink removals (bsc#1012628).
- driver core: Introduce device_link_wait_removal() (bsc#1012628).
- ASoC: SOF: Intel: hda: Compensate LLP in case it is not reset
  (bsc#1012628).
- ASoC: SOF: ipc4-pcm: Correct the delay calculation
  (bsc#1012628).
    ... changelog too long, skipping 395 lines ...
- commit f362b5c

==== liblouis ====
Subpackages: liblouis-data liblouis20 python3-louis

- Run python tests in %check

==== openSUSE-build-key ====

- SLM 6.0 key (ALP / SLF1) RSA 4096 bit key
  - gpg-pubkey-09d9ea69-645b99ce.asc
- 2024 SUSE Linux Enterprise 15 SP6 RSA 4096 bit key
  - gpg-pubkey-3fa1d6ce-63c9481c.asc
- SLM 6.0 key (ALP / SLF1) RSA 4096 bit reserve key
  - gpg-pubkey-73f03759-626bd414.asc
- 2024 SUSE Linux Enterprise 15 SP6 RSA 4096 bit reserve key
  - gpg-pubkey-d588dc46-63c939db.asc
- obsoleted a incorrectly used DSA1024 key (used in Slowroll).

==== pam ====
Version update (1.6.0 -> 1.6.1)

- Update to version 1.6.1
  - pam_env: fixed --disable-econf --enable-vendordir support.
  - pam_unix: do not warn if password aging is disabled.
  - pam_unix: try to set uid to 0 before unix_chkpwd invocation.
  - pam_unix: allow empty passwords with non-empty hashes.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Remove backports:
  - pam_env-fix_vendordir.patch
  - pam_env-fix-enable-vendordir-fallback.patch
  - pam_env-remove-escaped-newlines.patch
  - pam_unix-fix-password-aging-disabled.patch

==== pam-config ====
Version update (2.11 -> 2.11+git.20240411)

- Update to version 2.11+git.20240411:
  * Configure Himmelblau correctly w/ other services present
  * Configure other services correctly w/ Himmelblau present
  * Himmelblau session is only optional

==== pam-full-src ====
Version update (1.6.0 -> 1.6.1)

- Update to version 1.6.1
  - pam_env: fixed --disable-econf --enable-vendordir support.
  - pam_unix: do not warn if password aging is disabled.
  - pam_unix: try to set uid to 0 before unix_chkpwd invocation.
  - pam_unix: allow empty passwords with non-empty hashes.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Remove backports:
  - pam_env-fix_vendordir.patch
  - pam_env-fix-enable-vendordir-fallback.patch
  - pam_env-remove-escaped-newlines.patch
  - pam_unix-fix-password-aging-disabled.patch

==== postfix ====

- Move qshape(1) out of -doc, install it as a binary with the main package

==== update-alternatives ====
Version update (1.22.5 -> 1.22.6)

- Update to version 1.22.6.
  The changelog for this version isn't very large, so it's provided in full:
  * dpkg-deb: Fix up compressor parameters for default legacy format.
  * Perl modules:
  - Dpkg::Vendor::Debian: Make it possible to disable qa=-bug-implicit-func.
  - Dpkg::Vendor::Debian: Unconditionally set qa bug-implicit-func.
  * Documentation:
  - man: Document dpkg versions supporting SOURCE_DATE_EPOCH for various
    tools.
  * Code internals:
  - libdpkg: Use array access instead of pointer arithmetic for meminfo
    parser.
  - libdpkg: Use a macro to define the zstd default compression level.
  * Build system:
  - Test with minimal library dependencies in CI.
  - Add gen-release script.
  * Packaging:
  - Fix typo in man page reference in changelog.
  * Test suite:
  - Refactor OpenPGP backend and commands list.
  - Refactor certfile and keyfile filenames for OpenPGP test.
  - Skip OpenPGP tests if the backend does not have a verify command.
  * Localization:
  - Fix typos in Swedish man pages translations.
  - Fix typos in Swedish man pages translations.
  - Update Dutch man pages translations.
  - Update Portuguese man pages translations.
  - Update German man pages translation.