- add patch from Ubuntu for CVE-2021-33657 (mga#30293) - add upstream patch for CVE-2022-34568 (mga#30786)