Packages changed:
  kernel-source (7.2.10 -> 7.2.11)
  lrzip (0.702 -> 0.703)
  openssl-3

=== Details ===

==== kernel-source ====
Version update (7.2.10 -> 7.2.11)

- Update
  patches.kernel.org/7.2.7-012-drm-virtio-Fix-a-NULL-vs-ERR_PTR-bug-in-virtio_.patch
  (bsc#1012628 CVE-2026-98404 bsc#1285556).
- Update
  patches.kernel.org/7.2.7-055-net-iptunnel-fix-stale-transport-header-during-.patch
  (bsc#1012628 CVE-2026-98401 bsc#1285574).
- Update
  patches.kernel.org/7.2.7-520-exec-do_close_on_exec-before-taking-exec_update.patch
  (bsc#1012628 CVE-2026-98388 bsc#1285582).
- Update
  patches.kernel.org/7.2.7-574-s390-crypto-Fix-skcipher_walk-return-code-handl.patch
  (bsc#1012628 CVE-2026-98387 bsc#1285552).
- Update
  patches.kernel.org/7.2.8-028-RDMA-uverbs-Fix-mmap_lock-disassociation_lock-c.patch
  (bsc#1012628 CVE-2026-98431 bsc#1285559).
- Update
  patches.kernel.org/7.2.8-049-wifi-mwifiex-fix-IRQ-leak-using-wrong-index-in-.patch
  (bsc#1012628 CVE-2026-98426 bsc#1285562).
- Update
  patches.kernel.org/7.2.8-070-wifi-mac80211-don-t-warn-when-an-IBSS-has-no-ch.patch
  (bsc#1012628 CVE-2026-98425 bsc#1285567).
- Update
  patches.kernel.org/7.2.8-078-wifi-cfg80211-undo-netns-switch-if-renaming-the.patch
  (bsc#1012628 CVE-2026-98424 bsc#1285566).
- Update
  patches.kernel.org/7.2.8-081-wifi-mac80211_hwsim-don-t-hand-frames-to-mac802.patch
  (bsc#1012628 CVE-2026-98423 bsc#1285565).
- Update
  patches.kernel.org/7.2.8-083-wifi-mac80211-reset-the-AP_VLAN-tailroom-counte.patch
  (bsc#1012628 CVE-2026-98422 bsc#1285561).
- Update
  patches.kernel.org/7.2.8-084-wifi-mac80211-require-a-peer-station-for-TDLS-s.patch
  (bsc#1012628 CVE-2026-98421 bsc#1285564).
- Update
  patches.kernel.org/7.2.8-098-RDMA-efa-Keep-admin-queues-alive-while-IRQ-is-r.patch
  (bsc#1012628 CVE-2026-98430 bsc#1285558).
- Update
  patches.kernel.org/7.2.8-099-RDMA-efa-Keep-EQ-resources-alive-while-IRQ-is-r.patch
  (bsc#1012628 CVE-2026-98429 bsc#1285563).
- Update
  patches.kernel.org/7.2.8-137-ALSA-usb-6fire-Avoid-embedded-URBs.patch
  (bsc#1012628 CVE-2026-98428 bsc#1285560).
- Update
  patches.kernel.org/7.2.8-141-ksmbd-follow-SMB2-session-expiration-semantics.patch
  (bsc#1012628 CVE-2026-98420 bsc#1285557).
- Update
  patches.kernel.org/7.2.8-185-drop_monitor-fix-out-of-bounds-write-in-reset_p.patch
  (bsc#1012628 CVE-2026-98419 bsc#1285555).
- Update
  patches.kernel.org/7.2.8-204-net-sched-codel-bound-the-dropping-loop-per-deq.patch
  (bsc#1012628 CVE-2026-98427 bsc#1285572).
- Update
  patches.kernel.org/7.2.8-226-sched-core-Avoid-false-migration-warning-for-pr.patch
  (bsc#1012628 CVE-2026-98418 bsc#1285576).
- Update
  patches.kernel.org/7.2.8-289-dmaengine-ti-k3-udma-glue-fix-NULL-dereference-.patch
  (bsc#1012628 CVE-2026-98416 bsc#1285569).
- Update
  patches.kernel.org/7.2.8-308-soc-samsung-exynos-pmu-fix-use-after-free-of-in.patch
  (bsc#1012628 CVE-2026-98415 bsc#1285578).
- Update
  patches.kernel.org/7.2.8-310-memcg-avoid-charging-the-root-memcg-from-obj_cg.patch
  (bsc#1012628 CVE-2026-98414 bsc#1285580).
- Update
  patches.kernel.org/7.2.8-373-watchdog-da9063-fix-suspend-resume-handling-of-.patch
  (bsc#1012628 CVE-2026-98410 bsc#1285587).
- Update
  patches.kernel.org/7.2.8-385-wifi-rsi-fix-heap-OOB-write-on-key-removal.patch
  (bsc#1012628 CVE-2026-98407 bsc#1285553).
- Update
  patches.kernel.org/7.2.8-426-smb-client-fix-missing-iov-bounds-check-in-pars.patch
  (bsc#1012628 CVE-2026-98405 bsc#1285583).
- Update
  patches.kernel.org/7.2.9-398-sched-cache-Decouple-sched_cache_group-from-mm-.patch
  (bsc#1012628 CVE-2026-98385 bsc#1285039).
  suse-add-cves
- commit 308af37
- Linux 7.2.11 (bsc#1012628).
- HID: steam: Clean up locking (bsc#1012628).
- HID: steam: Refactor registration (bsc#1012628).
- HID: steam: Rearrange teardown sequence (bsc#1012628).
- HID: steam: Fully unregister controller when hidraw is opened
  (bsc#1012628).
- mm/mremap: fix locked_vm leak from MREMAP_DONTUNMAP self-merge
  (bsc#1012628).
- io_uring/kbuf: don't charge provided buffer rings to
  RLIMIT_MEMLOCK (bsc#1012628).
- io_uring: do not charge the SQ/CQ rings to RLIMIT_MEMLOCK
  (bsc#1012628).
- io_uring/memmap: account the pages a compound region really uses
  (bsc#1012628).
- drm/amd/display: Don't replace a sink mode that shares the
  native totals (bsc#1012628).
- sched_ext: Call ops.dequeue() when a task arrives on a remote
  local DSQ (bsc#1012628).
- sched_ext: Generate qseq from a per-task counter (bsc#1012628).
- drm/vc4: Fix binner slot allocation failing on an idle GPU
  (bsc#1012628).
- drm/vc4: Disable the V3D interrupt across runtime suspend
    ... changelog too long, skipping 497 lines ...
- commit 5dcab15

==== lrzip ====
Version update (0.702 -> 0.703)

- Update to version 0.703 (upstream 0.7.3):
  * Numerous performance speedups: batched AES-GCM/GHASH, hardware
    AES rounds where supported, overlapped compression and MD5,
    cached sliding-window history
  * Fix decompression of archives made by lrzip <= 0.4 (bounded
    token length)
- Exclude 32-bit arches: upstream 0.7.x removed all 32-bit code
  paths and refuses to compile where pointers are < 8 bytes
- Add python3-base BuildRequires: the 0.7.3 regression suite embeds
  a stdlib-only python3 AEAD pipeline test in %check

==== openssl-3 ====
Subpackages: libopenssl3 libopenssl3-32bit libopenssl3-x86-64-v3

- Build with enable-sslkeylog to support the SSLKEYLOGFILE
  environment variable usage. (jsc#PED-17079)