Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package kernel-source for openSUSE:Factory checked in at 2026-07-08 17:33:04 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/kernel-source (Old) and /work/SRC/openSUSE:Factory/.kernel-source.new.1982 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "kernel-source" Wed Jul 8 17:33:04 2026 rev:849 rq:1363779 version:7.1.3 Changes: -------- --- /work/SRC/openSUSE:Factory/kernel-source/dtb-aarch64.changes 2026-07-02 20:08:12.402785662 +0200 +++ /work/SRC/openSUSE:Factory/.kernel-source.new.1982/dtb-aarch64.changes 2026-07-08 17:34:35.189380920 +0200 @@ -1,0 +2,248 @@ +Sat Jul 4 18:20:40 CEST 2026 - [email protected] + +- Update + patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch + (bsc#1012628 CVE-2026-53354 bsc#1270230). +- Update + patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch + (bsc#1012628 CVE-2026-53359). +- Update + patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch + (bsc#1012628 CVE-2026-53362). + suse-add-cves +- commit 1cb5006 + +------------------------------------------------------------------- +Sat Jul 4 18:19:50 CEST 2026 - [email protected] + +- Linux 7.1.3 (bsc#1012628). +- KVM: x86: Fix shadow paging use-after-free due to unexpected + role (bsc#1012628). +- batman-adv: tp_meter: keep unacked list in ascending ordered + (bsc#1012628). +- batman-adv: tp_meter: initialize dup_acks explicitly + (bsc#1012628). +- batman-adv: tp_meter: initialize dec_cwnd explicitly + (bsc#1012628). +- batman-adv: tp_meter: avoid window underflow (bsc#1012628). +- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd + (bsc#1012628). +- batman-adv: tp_meter: fix fast recovery precondition + (bsc#1012628). +- batman-adv: tp_meter: handle seqno wrap-around for fast recovery + detection (bsc#1012628). +- batman-adv: tp_meter: add only finished tp_vars to lists + (bsc#1012628). +- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE + (bsc#1012628). +- batman-adv: prevent ELP transmission interval underflow + (bsc#1012628). +- batman-adv: tp_meter: initialize last_recv_time during init + (bsc#1012628). +- batman-adv: gw: don't deselect gateway with active hardif + (bsc#1012628). +- batman-adv: ensure bcast is writable before modifying TTL + (bsc#1012628). +- batman-adv: fix (m|b)cast csum after decrementing TTL + (bsc#1012628). +- batman-adv: frag: ensure fragment is writable before modifying + TTL (bsc#1012628). +- batman-adv: frag: avoid underflow of TTL (bsc#1012628). +- batman-adv: v: prevent OGM aggregation on disabled hardif + (bsc#1012628). +- batman-adv: tp_meter: restrict number of unacked list entries + (bsc#1012628). +- batman-adv: tp_meter: annotate last_recv_time access with + READ/WRITE_ONCE (bsc#1012628). +- batman-adv: tp_meter: prevent parallel modifications of + last_recv (bsc#1012628). +- batman-adv: tp_meter: handle overlapping packets (bsc#1012628). +- batman-adv: tt: don't merge change entries with different VIDs + (bsc#1012628). +- batman-adv: tt: track roam count per VID (bsc#1012628). +- batman-adv: dat: prevent false sharing between VLANs + (bsc#1012628). +- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628). +- batman-adv: tvlv: avoid race of cifsnotfound handler state + (bsc#1012628). +- ipv6: account for fraggap on the paged allocation path + (bsc#1012628). +- ipv4: account for fraggap on the paged allocation path + (bsc#1012628). +- ntfs3: reject direct userspace writes to reserved $LX* xattrs + (bsc#1012628). +- wifi: mt76: add wcid publish check in mt76_sta_add + (bsc#1012628). +- mac802154: llsec: add skb_cow_data() before in-place crypto + (bsc#1012628). +- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628). +- net: ip_gre: require CAP_NET_ADMIN in the device netns for + changelink (bsc#1012628). +- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist + (bsc#1012628). +- apparmor: mediate the implicit connect of TCP fast open sendmsg + (bsc#1012628). +- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and + CONFIG share BAR (bsc#1012628). +- fbdev: fix use-after-free in store_modes() (bsc#1012628). +- fscrypt: Fix key setup in edge case with multiple data unit + sizes (bsc#1012628). +- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628). +- block: invalidate cached plug timestamp after task switch + (bsc#1012628). +- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page + (bsc#1012628). +- err.h: use __always_inline on all error pointer helpers + (bsc#1012628). +- gcov: use atomic counter updates to fix concurrent access + crashes (bsc#1012628). +- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628). +- keys: Pin request_key_auth payload in instantiate paths + (bsc#1012628). +- userfaultfd: ensure mremap_userfaultfd_fail() releases + mmap_changing (bsc#1012628). +- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks + (bsc#1012628). +- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S + (bsc#1012628). +- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer + (bsc#1012628). +- wifi: ath11k: fix warning when unbinding (bsc#1012628). +- wifi: rtl8xxxu: Detect the maximum supported channel width + (bsc#1012628). +- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor + (bsc#1012628). +- wifi: rtw88: increase TX report timeout to fix race condition + (bsc#1012628). +- wifi: rtw88: usb: fix memory leaks on USB write failures + (bsc#1012628). +- wifi: iwlwifi: mvm: fix race condition in PTP removal + (bsc#1012628). +- wifi: iwlwifi: mld: fix race condition in PTP removal + (bsc#1012628). +- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA + session handlers (bsc#1012628). +- f2fs: fix missing read bio submission on large folio error + (bsc#1012628). +- f2fs: pass correct iostat type for single node writes + (bsc#1012628). +- f2fs: reject setattr size changes on large folio files + (bsc#1012628). +- f2fs: fix to do sanity check on f2fs_get_node_folio_ra() + (bsc#1012628). +- f2fs: validate orphan inode entry count (bsc#1012628). +- f2fs: validate compress cache inode only when enabled + (bsc#1012628). +- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode + (bsc#1012628). +- f2fs: fix to round down start offset of fallocate for pin file + (bsc#1012628). +- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes + (bsc#1012628). +- f2fs: validate ACL entry sizes in f2fs_acl_from_disk() + (bsc#1012628). +- Revert "f2fs: remove non-uptodate folio from the page cache + in move_data_block" (bsc#1012628). +- f2fs: fix incorrect FI_NO_EXTENT handling in + __destroy_extent_node() (bsc#1012628). +- f2fs: keep atomic write retry from zeroing original data + (bsc#1012628). +- f2fs: read COW data with the original inode during atomic write + (bsc#1012628). +- block: Avoid mounting the bdev pseudo-filesystem in userspace + (bsc#1012628). +- bpf: use kvfree() for replaced sysctl write buffer + (bsc#1012628). +- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS + (bsc#1012628). +- exfat: fix potential use-after-free in exfat_find_dir_entry() + (bsc#1012628). +- KVM: x86/mmu: Ensure hugepage is in by slot before checking + max mapping level (bsc#1012628). +- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch + with get_unaligned() (bsc#1012628). +- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628). +- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628). +- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next() + (bsc#1012628). +- hdlc_ppp: sync per-proto timers before freeing hdlc state + (bsc#1012628). +- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628). +- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done + (bsc#1012628). +- LoongArch: Report dying CPU to RCU in stop_this_cpu() + (bsc#1012628). +- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628). +- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in + fixup path (bsc#1012628). +- irqchip/imgpdc: Fix resource leak, add missing chained handler + cleanup on remove (bsc#1012628). +- fpga: region: fix use-after-free in + child_regions_with_firmware() (bsc#1012628). +- rpmsg: char: Fix use-after-free on probe error path + (bsc#1012628). +- ocfs2: reject oversized group bitmap descriptors (bsc#1012628). +- 9p: avoid putting oldfid in p9_client_walk() error path + (bsc#1012628). +- MIPS: smp: report dying CPU to RCU in stop_this_cpu() + (bsc#1012628). +- KVM: x86: hyper-v: Bound the bank index when querying sparse + banks (bsc#1012628). +- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path + (bsc#1012628). +- power: reset: linkstation-poweroff: fix use-after-free in the + linkstation_poweroff_init() (bsc#1012628). +- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628). +- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect() + (bsc#1012628). +- ntfs: serialize volume label accesses (bsc#1012628). +- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in + fb_videomode_to_var (bsc#1012628). +- fbdev: fbcon: fix out-of-bounds read in err_out of + fbcon_do_set_font() (bsc#1012628). +- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628). +- fbdev: modedb: fix a possible UAF in fb_find_mode() + (bsc#1012628). +- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode + (bsc#1012628). +- i2c: core: fix adapter registration race (bsc#1012628). +- nfsd: release layout stid on setlease failure (bsc#1012628). +- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628). +- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628). +- nfsd: fix inverted cp_ttl check in async copy reaper + (bsc#1012628). +- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file + (bsc#1012628). +- nfsd: check get_user() return when reading princhashlen + (bsc#1012628). +- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628). +- nfsd: avoid leaking pre-allocated openowner on unconfirmed + retry race (bsc#1012628). +- nfsd: reset write verifier on deferred writeback errors + (bsc#1012628). +- NFSv4/flexfiles: reject zero filehandle version count + (bsc#1012628). +- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr + (bsc#1012628). +- NFSv4: clear exception state on successful mkdir retry + (bsc#1012628). +- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628). +- ksmbd: fix out-of-bounds read in smb_check_perm_dacl() + (bsc#1012628). +- net/tcp-ao: fix use-after-free of key in del_async path + (bsc#1012628). +- apparmor: advertise the tcp fast open fix is applied + (bsc#1012628). +- Rename to + patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch. +- commit 208f777 + +------------------------------------------------------------------- +Fri Jul 3 08:48:10 CEST 2026 - [email protected] + +- Refresh + patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch. + Update upstream status. +- commit 0709164 + +------------------------------------------------------------------- dtb-armv6l.changes: same change dtb-armv7l.changes: same change dtb-riscv64.changes: same change kernel-64kb.changes: same change kernel-default.changes: same change kernel-docs.changes: same change kernel-kvmsmall.changes: same change kernel-lpae.changes: same change kernel-obs-build.changes: same change kernel-obs-qa.changes: same change kernel-pae.changes: same change kernel-source.changes: same change kernel-syms.changes: same change kernel-vanilla.changes: same change kernel-zfcpdump.changes: same change ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ dtb-aarch64.spec ++++++ --- /var/tmp/diff_new_pack.sPvGGk/_old 2026-07-08 17:34:53.694023943 +0200 +++ /var/tmp/diff_new_pack.sPvGGk/_new 2026-07-08 17:34:53.698024084 +0200 @@ -17,7 +17,7 @@ %define srcversion 7.1 -%define patchversion 7.1.2 +%define patchversion 7.1.3 %define variant %{nil} %include %_sourcedir/kernel-spec-macros @@ -25,9 +25,9 @@ %(chmod +x %_sourcedir/{guards,apply-patches,check-for-config-changes,group-source-files.pl,split-modules,modversions,kabi.pl,arch-symbols,check-module-license,splitflist,mergedep,moddep,modflist,kernel-subpackage-build}) Name: dtb-aarch64 -Version: 7.1.2 +Version: 7.1.3 %if 0%{?is_kotd} -Release: <RELEASE>.g992f18c +Release: <RELEASE>.g1cb5006 %else Release: 0 %endif dtb-armv6l.spec: same change dtb-armv7l.spec: same change dtb-riscv64.spec: same change ++++++ kernel-64kb.spec ++++++ --- /var/tmp/diff_new_pack.sPvGGk/_old 2026-07-08 17:34:53.870030107 +0200 +++ /var/tmp/diff_new_pack.sPvGGk/_new 2026-07-08 17:34:53.874030246 +0200 @@ -18,8 +18,8 @@ %define srcversion 7.1 -%define patchversion 7.1.2 -%define git_commit 992f18cb95b845e627c10687648dd04f93f18720 +%define patchversion 7.1.3 +%define git_commit 1cb50063d3e79af33499000798084b78b65d3685 %define variant %{nil} %define compress_modules zstd %define compress_vmlinux xz @@ -40,9 +40,9 @@ %(chmod +x %_sourcedir/{guards,apply-patches,check-for-config-changes,group-source-files.pl,split-modules,modversions,kabi.pl,arch-symbols,check-module-license,splitflist,mergedep,moddep,modflist,kernel-subpackage-build}) Name: kernel-64kb -Version: 7.1.2 +Version: 7.1.3 %if 0%{?is_kotd} -Release: <RELEASE>.g992f18c +Release: <RELEASE>.g1cb5006 %else Release: 0 %endif kernel-default.spec: same change ++++++ kernel-docs.spec ++++++ --- /var/tmp/diff_new_pack.sPvGGk/_old 2026-07-08 17:34:53.946032768 +0200 +++ /var/tmp/diff_new_pack.sPvGGk/_new 2026-07-08 17:34:53.950032908 +0200 @@ -17,8 +17,8 @@ %define srcversion 7.1 -%define patchversion 7.1.2 -%define git_commit 992f18cb95b845e627c10687648dd04f93f18720 +%define patchversion 7.1.3 +%define git_commit 1cb50063d3e79af33499000798084b78b65d3685 %define variant %{nil} %define build_html 1 %define build_pdf 0 @@ -28,9 +28,9 @@ %(chmod +x %_sourcedir/{guards,apply-patches,check-for-config-changes,group-source-files.pl,split-modules,modversions,kabi.pl,arch-symbols,check-module-license,splitflist,mergedep,moddep,modflist,kernel-subpackage-build}) Name: kernel-docs -Version: 7.1.2 +Version: 7.1.3 %if 0%{?is_kotd} -Release: <RELEASE>.g992f18c +Release: <RELEASE>.g1cb5006 %else Release: 0 %endif ++++++ kernel-kvmsmall.spec ++++++ --- /var/tmp/diff_new_pack.sPvGGk/_old 2026-07-08 17:34:53.994034448 +0200 +++ /var/tmp/diff_new_pack.sPvGGk/_new 2026-07-08 17:34:53.994034448 +0200 @@ -18,8 +18,8 @@ %define srcversion 7.1 -%define patchversion 7.1.2 -%define git_commit 992f18cb95b845e627c10687648dd04f93f18720 +%define patchversion 7.1.3 +%define git_commit 1cb50063d3e79af33499000798084b78b65d3685 %define variant %{nil} %define compress_modules zstd %define compress_vmlinux xz @@ -40,9 +40,9 @@ %(chmod +x %_sourcedir/{guards,apply-patches,check-for-config-changes,group-source-files.pl,split-modules,modversions,kabi.pl,arch-symbols,check-module-license,splitflist,mergedep,moddep,modflist,kernel-subpackage-build}) Name: kernel-kvmsmall -Version: 7.1.2 +Version: 7.1.3 %if 0%{?is_kotd} -Release: <RELEASE>.g992f18c +Release: <RELEASE>.g1cb5006 %else Release: 0 %endif kernel-lpae.spec: same change ++++++ kernel-obs-build.spec ++++++ --- /var/tmp/diff_new_pack.sPvGGk/_old 2026-07-08 17:34:54.074037250 +0200 +++ /var/tmp/diff_new_pack.sPvGGk/_new 2026-07-08 17:34:54.074037250 +0200 @@ -19,7 +19,7 @@ #!BuildIgnore: post-build-checks -%define patchversion 7.1.2 +%define patchversion 7.1.3 %define variant %{nil} %include %_sourcedir/kernel-spec-macros @@ -38,23 +38,23 @@ %endif %endif %endif -%global kernel_package kernel%kernel_flavor-srchash-992f18cb95b845e627c10687648dd04f93f18720 +%global kernel_package kernel%kernel_flavor-srchash-1cb50063d3e79af33499000798084b78b65d3685 %endif %if 0%{?rhel_version} %global kernel_package kernel %endif Name: kernel-obs-build -Version: 7.1.2 +Version: 7.1.3 %if 0%{?is_kotd} -Release: <RELEASE>.g992f18c +Release: <RELEASE>.g1cb5006 %else Release: 0 %endif Summary: package kernel and initrd for OBS VM builds License: GPL-2.0-only Group: SLES -Provides: kernel-obs-build-srchash-992f18cb95b845e627c10687648dd04f93f18720 +Provides: kernel-obs-build-srchash-1cb50063d3e79af33499000798084b78b65d3685 BuildRequires: coreutils BuildRequires: device-mapper BuildRequires: dracut ++++++ kernel-obs-qa.spec ++++++ --- /var/tmp/diff_new_pack.sPvGGk/_old 2026-07-08 17:34:54.110038510 +0200 +++ /var/tmp/diff_new_pack.sPvGGk/_new 2026-07-08 17:34:54.114038651 +0200 @@ -17,15 +17,15 @@ # needsrootforbuild -%define patchversion 7.1.2 +%define patchversion 7.1.3 %define variant %{nil} %include %_sourcedir/kernel-spec-macros Name: kernel-obs-qa -Version: 7.1.2 +Version: 7.1.3 %if 0%{?is_kotd} -Release: <RELEASE>.g992f18c +Release: <RELEASE>.g1cb5006 %else Release: 0 %endif @@ -36,7 +36,7 @@ # kernel-obs-build must be also configured as VMinstall, but is required # here as well to avoid that qa and build package build parallel %if ! 0%{?qemu_user_space_build} -BuildRequires: kernel-obs-build-srchash-992f18cb95b845e627c10687648dd04f93f18720 +BuildRequires: kernel-obs-build-srchash-1cb50063d3e79af33499000798084b78b65d3685 %endif BuildRequires: modutils ExclusiveArch: aarch64 armv6hl armv7hl ppc64le riscv64 s390x x86_64 ++++++ kernel-pae.spec ++++++ --- /var/tmp/diff_new_pack.sPvGGk/_old 2026-07-08 17:34:54.158040191 +0200 +++ /var/tmp/diff_new_pack.sPvGGk/_new 2026-07-08 17:34:54.162040332 +0200 @@ -18,8 +18,8 @@ %define srcversion 7.1 -%define patchversion 7.1.2 -%define git_commit 992f18cb95b845e627c10687648dd04f93f18720 +%define patchversion 7.1.3 +%define git_commit 1cb50063d3e79af33499000798084b78b65d3685 %define variant %{nil} %define compress_modules zstd %define compress_vmlinux xz @@ -40,9 +40,9 @@ %(chmod +x %_sourcedir/{guards,apply-patches,check-for-config-changes,group-source-files.pl,split-modules,modversions,kabi.pl,arch-symbols,check-module-license,splitflist,mergedep,moddep,modflist,kernel-subpackage-build}) Name: kernel-pae -Version: 7.1.2 +Version: 7.1.3 %if 0%{?is_kotd} -Release: <RELEASE>.g992f18c +Release: <RELEASE>.g1cb5006 %else Release: 0 %endif ++++++ kernel-source.spec ++++++ --- /var/tmp/diff_new_pack.sPvGGk/_old 2026-07-08 17:34:54.202041732 +0200 +++ /var/tmp/diff_new_pack.sPvGGk/_new 2026-07-08 17:34:54.206041872 +0200 @@ -17,8 +17,8 @@ %define srcversion 7.1 -%define patchversion 7.1.2 -%define git_commit 992f18cb95b845e627c10687648dd04f93f18720 +%define patchversion 7.1.3 +%define git_commit 1cb50063d3e79af33499000798084b78b65d3685 %define variant %{nil} %define gcc_package gcc %define gcc_compiler gcc @@ -28,9 +28,9 @@ %(chmod +x %_sourcedir/{guards,apply-patches,check-for-config-changes,group-source-files.pl,split-modules,modversions,kabi.pl,arch-symbols,check-module-license,splitflist,mergedep,moddep,modflist,kernel-subpackage-build}) Name: kernel-source -Version: 7.1.2 +Version: 7.1.3 %if 0%{?is_kotd} -Release: <RELEASE>.g992f18c +Release: <RELEASE>.g1cb5006 %else Release: 0 %endif ++++++ kernel-syms.spec ++++++ --- /var/tmp/diff_new_pack.sPvGGk/_old 2026-07-08 17:34:54.258043693 +0200 +++ /var/tmp/diff_new_pack.sPvGGk/_new 2026-07-08 17:34:54.258043693 +0200 @@ -16,15 +16,15 @@ # -%define git_commit 992f18cb95b845e627c10687648dd04f93f18720 +%define git_commit 1cb50063d3e79af33499000798084b78b65d3685 %define variant %{nil} %include %_sourcedir/kernel-spec-macros Name: kernel-syms -Version: 7.1.2 +Version: 7.1.3 %if 0%{?is_kotd} -Release: <RELEASE>.g992f18c +Release: <RELEASE>.g1cb5006 %else Release: 0 %endif ++++++ kernel-vanilla.spec ++++++ --- /var/tmp/diff_new_pack.sPvGGk/_old 2026-07-08 17:34:54.306045373 +0200 +++ /var/tmp/diff_new_pack.sPvGGk/_new 2026-07-08 17:34:54.310045514 +0200 @@ -18,8 +18,8 @@ %define srcversion 7.1 -%define patchversion 7.1.2 -%define git_commit 992f18cb95b845e627c10687648dd04f93f18720 +%define patchversion 7.1.3 +%define git_commit 1cb50063d3e79af33499000798084b78b65d3685 %define variant %{nil} %define compress_modules zstd %define compress_vmlinux xz @@ -40,9 +40,9 @@ %(chmod +x %_sourcedir/{guards,apply-patches,check-for-config-changes,group-source-files.pl,split-modules,modversions,kabi.pl,arch-symbols,check-module-license,splitflist,mergedep,moddep,modflist,kernel-subpackage-build}) Name: kernel-vanilla -Version: 7.1.2 +Version: 7.1.3 %if 0%{?is_kotd} -Release: <RELEASE>.g992f18c +Release: <RELEASE>.g1cb5006 %else Release: 0 %endif kernel-zfcpdump.spec: same change ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.sPvGGk/_old 2026-07-08 17:34:54.554054058 +0200 +++ /var/tmp/diff_new_pack.sPvGGk/_new 2026-07-08 17:34:54.558054198 +0200 @@ -1,6 +1,6 @@ -mtime: 1782968796 -commit: 3a6d53ab140bebee24a351c0275c6c31e8c48cbd321d2670c74845de7a3f73d8 +mtime: 1783184585 +commit: f81a92231476eabef2dec67ac2688b404ad3f54951caa9f9ffd0cdecd32fe83d url: https://src.opensuse.org/jirislaby/kernel-source -revision: 3a6d53ab140bebee24a351c0275c6c31e8c48cbd321d2670c74845de7a3f73d8 +revision: f81a92231476eabef2dec67ac2688b404ad3f54951caa9f9ffd0cdecd32fe83d trackingbranch: Kernel/stable ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-07-04 19:03:05.000000000 +0200 @@ -0,0 +1 @@ +.osc ++++++ patches.kernel.org.tar.bz2 ++++++ ++++ 11491 lines of diff (skipped) ++++++ patches.suse.tar.bz2 ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch new/patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch --- old/patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch 2026-07-02 07:02:38.000000000 +0200 +++ new/patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch 2026-07-04 18:19:50.000000000 +0200 @@ -2,9 +2,8 @@ Date: Mon, 22 Jun 2026 20:23:09 +0200 Subject: ACPICA: Unbreak tools build after switching over to strscpy_pad() References: bsc#1268472 -Git-repo: https://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm.git Git-commit: 292db66afd20dd0b7a3c9a3dad9b864a64c8bddf -Patch-mainline: Queued in subsystem maintainer repository +Patch-mainline: v7.2-rc1 Commit 97f7d3f9c9ac ("ACPICA: Replace strncpy() with strscpy_pad() in acpi_ut_safe_strncpy()") switched over the ACPICA code in the kernel to diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch new/patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch --- old/patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch 2026-07-02 07:02:38.000000000 +0200 +++ new/patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch 1970-01-01 01:00:00.000000000 +0100 @@ -1,113 +0,0 @@ -From 6f060496d03e4dc560a40f73770bd08335cb7a27 Mon Sep 17 00:00:00 2001 -From: Ruslan Valiyev <[email protected]> -Date: Tue, 26 May 2026 00:04:46 +0200 -Subject: [PATCH] apparmor: fix use-after-free in rawdata dedup loop -References: bko#221513 -Patch-mainline: v7.2-rc1 -Git-commit: 6f060496d03e4dc560a40f73770bd08335cb7a27 - -aa_replace_profiles() walks ns->rawdata_list to dedup the incoming -policy blob against entries already attached to existing profiles. -Per the kernel-doc on struct aa_loaddata, list membership does not -hold a reference: profiles hold pcount, and when the last pcount -drops, do_ploaddata_rmfs() is queued on a workqueue that takes -ns->lock and removes the entry. Between dropping the last pcount -and the workqueue running, an entry remains on the list with -pcount == 0. - -aa_get_profile_loaddata() is an unconditional kref_get() on -pcount, so when the dedup loop hits such an entry, refcount -hardening reports - - refcount_t: addition on 0; use-after-free. - -inside aa_replace_profiles(), and the poisoned counter then -trips "saturated" and "underflow" warnings on the subsequent -uses of the same loaddata. - -Before commit a0b7091c4de4 ("apparmor: fix race on rawdata -dereference") the dedup path used a get_unless_zero-style helper -on a single counter, so the existing "if (tmp)" guard was -meaningful. The split-refcount refactor introduced -aa_get_profile_loaddata(), which has plain kref_get() semantics, -and the guard quietly became a no-op. - -Introduce aa_get_profile_loaddata_not0(), matching the existing -_not0 convention used by aa_get_profile_not0(), and use it for -the rawdata_list dedup lookup so dying entries are skipped. - -Reproduced on x86_64 with v7.1-rc5 in QEMU+KVM running Ubuntu -24.04 + stress-ng 0.17.06: - - stress-ng --apparmor 1 --klog-check --timeout 60s - -Without this patch the three refcount_t warnings fire within a -few seconds. With it the same 60 s run is clean. Coverage is a -smoke-test only; a longer soak with CONFIG_KASAN, CONFIG_KCSAN -and CONFIG_PROVE_LOCKING would be welcome from anyone with the -cycles. - -Fixes: a0b7091c4de4 ("apparmor: fix race on rawdata dereference") -Reported-by: Colin Ian King <[email protected]> -Closes: https://bugzilla.kernel.org/show_bug.cgi?id=221513 -Cc: [email protected] -Signed-off-by: Ruslan Valiyev <[email protected]> -Signed-off-by: John Johansen <[email protected]> -Acked-by: David Disseldorp <[email protected]> ---- - security/apparmor/include/policy_unpack.h | 19 +++++++++++++++++++ - security/apparmor/policy.c | 8 ++++++-- - 2 files changed, 25 insertions(+), 2 deletions(-) - -diff --git a/security/apparmor/include/policy_unpack.h b/security/apparmor/include/policy_unpack.h -index e5a95dc4da1f7..b9de0fdf9ee52 100644 ---- a/security/apparmor/include/policy_unpack.h -+++ b/security/apparmor/include/policy_unpack.h -@@ -163,6 +163,25 @@ aa_get_profile_loaddata(struct aa_loaddata *data) - return data; - } - -+/** -+ * aa_get_profile_loaddata_not0 - get a profile reference count if not zero -+ * @data: reference to get a count on -+ * -+ * Like aa_get_profile_loaddata(), but safe to call on an entry that may -+ * be on a list (e.g. ns->rawdata_list) where the last pcount has already -+ * dropped and the deferred cleanup has not yet run. -+ * -+ * Returns: pointer to reference, or %NULL if @data is NULL or its -+ * profile refcount has already reached zero. -+ */ -+static inline struct aa_loaddata * -+aa_get_profile_loaddata_not0(struct aa_loaddata *data) -+{ -+ if (data && kref_get_unless_zero(&data->pcount)) -+ return data; -+ return NULL; -+} -+ - void __aa_loaddata_update(struct aa_loaddata *data, long revision); - bool aa_rawdata_eq(struct aa_loaddata *l, struct aa_loaddata *r); - void aa_loaddata_kref(struct kref *kref); -diff --git a/security/apparmor/policy.c b/security/apparmor/policy.c -index 847b0ff450c51..b59e827747dad 100644 ---- a/security/apparmor/policy.c -+++ b/security/apparmor/policy.c -@@ -1230,8 +1230,12 @@ ssize_t aa_replace_profiles(struct aa_ns *policy_ns, struct aa_label *label, - if (aa_rawdata_eq(rawdata_ent, udata)) { - struct aa_loaddata *tmp; - -- tmp = aa_get_profile_loaddata(rawdata_ent); -- /* check we didn't fail the race */ -+ /* -+ * Entries remain on rawdata_list with -+ * pcount == 0 until do_ploaddata_rmfs() -+ * runs; only take a live profile ref. -+ */ -+ tmp = aa_get_profile_loaddata_not0(rawdata_ent); - if (tmp) { - aa_put_profile_loaddata(udata); - udata = tmp; --- -2.51.0 - ++++++ series.conf ++++++ --- /var/tmp/diff_new_pack.sPvGGk/_old 2026-07-08 17:34:55.610091035 +0200 +++ /var/tmp/diff_new_pack.sPvGGk/_new 2026-07-08 17:34:55.614091175 +0200 @@ -53,6 +53,129 @@ patches.kernel.org/7.1.2-013-media-vidtv-fix-NULL-pointer-dereference-in-vid.patch patches.kernel.org/7.1.2-014-virtiofs-fix-UAF-on-submount-umount.patch patches.kernel.org/7.1.2-015-Linux-7.1.2.patch + patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch + patches.kernel.org/7.1.3-002-batman-adv-tp_meter-keep-unacked-list-in-ascend.patch + patches.kernel.org/7.1.3-003-batman-adv-tp_meter-initialize-dup_acks-explici.patch + patches.kernel.org/7.1.3-004-batman-adv-tp_meter-initialize-dec_cwnd-explici.patch + patches.kernel.org/7.1.3-005-batman-adv-tp_meter-avoid-window-underflow.patch + patches.kernel.org/7.1.3-006-batman-adv-tp_meter-avoid-divide-by-zero-for-de.patch + patches.kernel.org/7.1.3-007-batman-adv-tp_meter-fix-fast-recovery-precondit.patch + patches.kernel.org/7.1.3-008-batman-adv-tp_meter-handle-seqno-wrap-around-fo.patch + patches.kernel.org/7.1.3-009-batman-adv-tp_meter-add-only-finished-tp_vars-t.patch + patches.kernel.org/7.1.3-010-batman-adv-bla-annotate-lasttime-access-with-RE.patch + patches.kernel.org/7.1.3-011-batman-adv-prevent-ELP-transmission-interval-un.patch + patches.kernel.org/7.1.3-012-batman-adv-tp_meter-initialize-last_recv_time-d.patch + patches.kernel.org/7.1.3-013-batman-adv-gw-don-t-deselect-gateway-with-activ.patch + patches.kernel.org/7.1.3-014-batman-adv-ensure-bcast-is-writable-before-modi.patch + patches.kernel.org/7.1.3-015-batman-adv-fix-m-b-cast-csum-after-decrementing.patch + patches.kernel.org/7.1.3-016-batman-adv-frag-ensure-fragment-is-writable-bef.patch + patches.kernel.org/7.1.3-017-batman-adv-frag-avoid-underflow-of-TTL.patch + patches.kernel.org/7.1.3-018-batman-adv-v-prevent-OGM-aggregation-on-disable.patch + patches.kernel.org/7.1.3-019-batman-adv-tp_meter-restrict-number-of-unacked-.patch + patches.kernel.org/7.1.3-020-batman-adv-tp_meter-annotate-last_recv_time-acc.patch + patches.kernel.org/7.1.3-021-batman-adv-tp_meter-prevent-parallel-modificati.patch + patches.kernel.org/7.1.3-022-batman-adv-tp_meter-handle-overlapping-packets.patch + patches.kernel.org/7.1.3-023-batman-adv-tt-don-t-merge-change-entries-with-d.patch + patches.kernel.org/7.1.3-024-batman-adv-tt-track-roam-count-per-VID.patch + patches.kernel.org/7.1.3-025-batman-adv-dat-prevent-false-sharing-between-VL.patch + patches.kernel.org/7.1.3-026-batman-adv-tvlv-enforce-2-byte-alignment.patch + patches.kernel.org/7.1.3-027-batman-adv-tvlv-avoid-race-of-cifsnotfound-hand.patch + patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch + patches.kernel.org/7.1.3-029-ipv4-account-for-fraggap-on-the-paged-allocatio.patch + patches.kernel.org/7.1.3-030-ntfs3-reject-direct-userspace-writes-to-reserve.patch + patches.kernel.org/7.1.3-031-wifi-mt76-add-wcid-publish-check-in-mt76_sta_ad.patch + patches.kernel.org/7.1.3-032-mac802154-llsec-add-skb_cow_data-before-in-plac.patch + patches.kernel.org/7.1.3-033-net-skmsg-preserve-sg.copy-across-SG-transforms.patch + patches.kernel.org/7.1.3-034-net-ip_gre-require-CAP_NET_ADMIN-in-the-device-.patch + patches.kernel.org/7.1.3-035-PCI-P2PDMA-Add-Intel-QAT-DSA-IAA-devices-to-whi.patch + patches.kernel.org/7.1.3-036-apparmor-mediate-the-implicit-connect-of-TCP-fa.patch + patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch + patches.kernel.org/7.1.3-038-NTB-epf-Avoid-pci_iounmap-with-offset-when-PEER.patch + patches.kernel.org/7.1.3-039-fbdev-fix-use-after-free-in-store_modes.patch + patches.kernel.org/7.1.3-040-fscrypt-Fix-key-setup-in-edge-case-with-multipl.patch + patches.kernel.org/7.1.3-041-kernel-fork-clear-PF_BLOCK_TS-in-copy_process.patch + patches.kernel.org/7.1.3-042-block-invalidate-cached-plug-timestamp-after-ta.patch + patches.kernel.org/7.1.3-043-KVM-arm64-Omit-tag-sync-on-stage-2-mappings-of-.patch + patches.kernel.org/7.1.3-044-err.h-use-__always_inline-on-all-error-pointer-.patch + patches.kernel.org/7.1.3-045-gcov-use-atomic-counter-updates-to-fix-concurre.patch + patches.kernel.org/7.1.3-046-KEYS-fix-overflow-in-keyctl_pkey_params_get_2.patch + patches.kernel.org/7.1.3-047-keys-Pin-request_key_auth-payload-in-instantiat.patch + patches.kernel.org/7.1.3-048-userfaultfd-ensure-mremap_userfaultfd_fail-rele.patch + patches.kernel.org/7.1.3-049-userfaultfd-build-__VMA_UFFD_FLAGS-from-config-.patch + patches.kernel.org/7.1.3-050-wifi-mt76-mt76x2u-Add-support-for-ELECOM-WDC-86.patch + patches.kernel.org/7.1.3-051-wifi-mt76-mt7925-don-t-disable-AP-BSS-when-remo.patch + patches.kernel.org/7.1.3-052-wifi-ath11k-fix-warning-when-unbinding.patch + patches.kernel.org/7.1.3-053-wifi-rtl8xxxu-Detect-the-maximum-supported-chan.patch + patches.kernel.org/7.1.3-054-wifi-rtlwifi-rtl8821ae-Fix-C2H-bit-location-in-.patch + patches.kernel.org/7.1.3-055-wifi-rtw88-increase-TX-report-timeout-to-fix-ra.patch + patches.kernel.org/7.1.3-056-wifi-rtw88-usb-fix-memory-leaks-on-USB-write-fa.patch + patches.kernel.org/7.1.3-057-wifi-iwlwifi-mvm-fix-race-condition-in-PTP-remo.patch + patches.kernel.org/7.1.3-058-wifi-iwlwifi-mld-fix-race-condition-in-PTP-remo.patch + patches.kernel.org/7.1.3-059-wifi-iwlwifi-mld-validate-sta_mask-before-ffs-i.patch + patches.kernel.org/7.1.3-060-f2fs-fix-missing-read-bio-submission-on-large-f.patch + patches.kernel.org/7.1.3-061-f2fs-pass-correct-iostat-type-for-single-node-w.patch + patches.kernel.org/7.1.3-062-f2fs-reject-setattr-size-changes-on-large-folio.patch + patches.kernel.org/7.1.3-063-f2fs-fix-to-do-sanity-check-on-f2fs_get_node_fo.patch + patches.kernel.org/7.1.3-064-f2fs-validate-orphan-inode-entry-count.patch + patches.kernel.org/7.1.3-065-f2fs-validate-compress-cache-inode-only-when-en.patch + patches.kernel.org/7.1.3-066-f2fs-atomic-fix-UAF-issue-on-f2fs_inode_info.at.patch + patches.kernel.org/7.1.3-067-f2fs-fix-to-round-down-start-offset-of-fallocat.patch + patches.kernel.org/7.1.3-068-f2fs-bound-i_inline_xattr_size-for-non-inline-x.patch + patches.kernel.org/7.1.3-069-f2fs-validate-ACL-entry-sizes-in-f2fs_acl_from_.patch + patches.kernel.org/7.1.3-070-Revert-f2fs-remove-non-uptodate-folio-from-the-.patch + patches.kernel.org/7.1.3-071-f2fs-fix-incorrect-FI_NO_EXTENT-handling-in-__d.patch + patches.kernel.org/7.1.3-072-f2fs-keep-atomic-write-retry-from-zeroing-origi.patch + patches.kernel.org/7.1.3-073-f2fs-read-COW-data-with-the-original-inode-duri.patch + patches.kernel.org/7.1.3-074-block-Avoid-mounting-the-bdev-pseudo-filesystem.patch + patches.kernel.org/7.1.3-075-bpf-use-kvfree-for-replaced-sysctl-write-buffer.patch + patches.kernel.org/7.1.3-076-MIPS-DEC-Prevent-initial-console-buffer-from-la.patch + patches.kernel.org/7.1.3-077-exfat-fix-potential-use-after-free-in-exfat_fin.patch + patches.kernel.org/7.1.3-078-KVM-x86-mmu-Ensure-hugepage-is-in-by-slot-befor.patch + patches.kernel.org/7.1.3-079-KVM-Replace-guest-triggerable-BUG_ON-in-ioevent.patch + patches.kernel.org/7.1.3-080-crypto-nx-fix-nx_crypto_ctx_exit-argument.patch + patches.kernel.org/7.1.3-081-gfs2-fix-use-after-free-in-gfs2_qd_dealloc.patch + patches.kernel.org/7.1.3-082-pwrseq-core-fix-use-after-free-in-pwrseq_debugf.patch + patches.kernel.org/7.1.3-083-hdlc_ppp-sync-per-proto-timers-before-freeing-h.patch + patches.kernel.org/7.1.3-084-blk-cgroup-fix-UAF-in-__blkcg_rstat_flush.patch + patches.kernel.org/7.1.3-085-tipc-fix-slab-use-after-free-Read-in-tipc_aead_.patch + patches.kernel.org/7.1.3-086-LoongArch-Report-dying-CPU-to-RCU-in-stop_this_.patch + patches.kernel.org/7.1.3-087-pNFS-Fix-use-after-free-in-pnfs_update_layout.patch + patches.kernel.org/7.1.3-088-sched-mmcid-Fix-OOB-clear_bit-when-CID-is-MM_CI.patch + patches.kernel.org/7.1.3-089-irqchip-imgpdc-Fix-resource-leak-add-missing-ch.patch + patches.kernel.org/7.1.3-090-fpga-region-fix-use-after-free-in-child_regions.patch + patches.kernel.org/7.1.3-091-rpmsg-char-Fix-use-after-free-on-probe-error-pa.patch + patches.kernel.org/7.1.3-092-ocfs2-reject-oversized-group-bitmap-descriptors.patch + patches.kernel.org/7.1.3-093-9p-avoid-putting-oldfid-in-p9_client_walk-error.patch + patches.kernel.org/7.1.3-094-MIPS-smp-report-dying-CPU-to-RCU-in-stop_this_c.patch + patches.kernel.org/7.1.3-095-KVM-x86-hyper-v-Bound-the-bank-index-when-query.patch + patches.kernel.org/7.1.3-096-KVM-SVM-Fix-page-overflow-in-sev_dbg_crypt-for-.patch + patches.kernel.org/7.1.3-097-power-reset-linkstation-poweroff-fix-use-after-.patch + patches.kernel.org/7.1.3-098-riscv-mm-Extract-helper-mark_new_valid_map.patch + patches.kernel.org/7.1.3-099-riscv-kfence-Call-mark_new_valid_map-for-kfence.patch + patches.kernel.org/7.1.3-100-ntfs-serialize-volume-label-accesses.patch + patches.kernel.org/7.1.3-101-fbdev-Fix-fb_new_modelist-to-prevent-null-ptr-d.patch + patches.kernel.org/7.1.3-102-fbdev-fbcon-fix-out-of-bounds-read-in-err_out-o.patch + patches.kernel.org/7.1.3-103-fbdev-omap2-fix-use-after-free-in-omapfb_mmap.patch + patches.kernel.org/7.1.3-104-fbdev-modedb-fix-a-possible-UAF-in-fb_find_mode.patch + patches.kernel.org/7.1.3-105-fbdev-modedb-Fix-misaligned-fields-in-the-1920x.patch + patches.kernel.org/7.1.3-106-i2c-core-fix-adapter-registration-race.patch + patches.kernel.org/7.1.3-107-nfsd-release-layout-stid-on-setlease-failure.patch + patches.kernel.org/7.1.3-108-NFSD-Fix-SECINFO_NO_NAME-decode-error-cleanup.patch + patches.kernel.org/7.1.3-109-nfsd-fix-posix_acl-leak-on-SETACL-decode-failur.patch + patches.kernel.org/7.1.3-110-nfsd-fix-inverted-cp_ttl-check-in-async-copy-re.patch + patches.kernel.org/7.1.3-111-nfsd-fix-posix_acl-leak-and-ignored-error-in-nf.patch + patches.kernel.org/7.1.3-112-nfsd-check-get_user-return-when-reading-princha.patch + patches.kernel.org/7.1.3-113-nfsd-fix-dead-ACL-conflict-guard-in-nfsd4_creat.patch + patches.kernel.org/7.1.3-114-nfsd-avoid-leaking-pre-allocated-openowner-on-u.patch + patches.kernel.org/7.1.3-115-nfsd-reset-write-verifier-on-deferred-writeback.patch + patches.kernel.org/7.1.3-116-NFSv4-flexfiles-reject-zero-filehandle-version-.patch + patches.kernel.org/7.1.3-117-NFSv4-pNFS-reject-zero-length-r_addr-in-nfs4_de.patch + patches.kernel.org/7.1.3-118-NFSv4-clear-exception-state-on-successful-mkdir.patch + patches.kernel.org/7.1.3-119-NFS-Prevent-resource-leak-in-nfs_alloc_server.patch + patches.kernel.org/7.1.3-120-ksmbd-fix-out-of-bounds-read-in-smb_check_perm_.patch + patches.kernel.org/7.1.3-121-net-tcp-ao-fix-use-after-free-of-key-in-del_asy.patch + patches.kernel.org/7.1.3-122-apparmor-advertise-the-tcp-fast-open-fix-is-app.patch + patches.kernel.org/7.1.3-123-Linux-7.1.3.patch ######################################################## # Build fixes that apply to the vanilla kernel too. @@ -99,9 +222,6 @@ patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch - patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch - - # rafael/linux-pm linux-next patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch ######################################################## ++++++ source-timestamp ++++++ --- /var/tmp/diff_new_pack.sPvGGk/_old 2026-07-08 17:34:55.638092016 +0200 +++ /var/tmp/diff_new_pack.sPvGGk/_new 2026-07-08 17:34:55.642092155 +0200 @@ -1,4 +1,4 @@ -2026-07-02 05:05:55 +0000 -GIT Revision: 992f18cb95b845e627c10687648dd04f93f18720 +2026-07-04 16:20:40 +0000 +GIT Revision: 1cb50063d3e79af33499000798084b78b65d3685 GIT Branch: stable
