# changelog

author: werner@suse.de
changelog:
  - Add patch git-33-04c9daea971d58248c64076d41315129a7083629.patch
    * In bash.bashrc move ssh/sudo source of profile to avoid removing
      the `is' variable before last use (boo#1088524)
    * Avoid the shell code checker stumble over `function' keys
      word in ls.bash (git#54).


author: werner@suse.de
changelog:
  - Add patch git-35-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
    No error at login if java system directory is empty (bsc#1102310)


author: ro@suse.de
changelog:
  -  Add patch git-34-011e1546bd1092c2a8c9754866ca02439ed23d54.patch
    * Get mixed use case of service wrapper script straight
      (bsc#1040613)


author: ro@suse.de
changelog:
  - add patch git-36-7a00987c0df059cc1495cba7d70d319593d4cfed.patch
    test for xdgdir/applications before adding data dir (bsc#1095969)


author: ro@suse.de
changelog:
  - Add patch git-39-00d332a443062395957f422c89eaed9d0979ec00.patch
    * update logic for JRE_HOME env variable (bsc#1128246)


author: ro@suse.de
changelog:
  - Add patch git-40-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
    * Restore old position of ssh/sudo source of profile
      for bug bsc#1118364 but hopefully do not reintroduce
      bug boo#1088524


author: sandonov@suse.com
changelog:
  - Revert "Avoid NAT on Bridges. Bridges are L2 devices, really."
    (bsc#1115020). Based on github.com/openSUSE/aaa_base/pull/35
    * 0001-Revert-Avoid-NAT-on-Bridges-Bridges-are-L2-devices-really-bsc-1115020.patch


author: ro@suse.de
changelog:
  - add patch git-36-4b7d6b6e126d96e48757783e9fc59ac477ba6a44.patch
    xdg-environment: reduce list in /opt/* to gnome,kde4,kde3
    (bnc#910904) (bsc#1149127)
  - rename patch
    git-36-7a00987c0df059cc1495cba7d70d319593d4cfed.patch to
    git-37-7a00987c0df059cc1495cba7d70d319593d4cfed.patch


author: werner@suse.de
changelog:
  - Add patch git-38-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
    Use official key binding functions in inputrc
    that is replace up-history with previous-history, down-history with
    next-history and backward-delete-word with backward-kill-word
    (bsc#1084934).


author: ro@suse.de
changelog:
  - add patch git-41-0da43d3808a0529003524d762118ff46a628e0b0.patch
    * generalize testing for JVMs when creating the java path
      to support sapjvm and others (boo#1157794)


author: sweet_f_a@gmx.de
changelog:
  - update to upstream alpha 1.06.95 (2006-09-05), in use in other
    major distros for quite a long time (Debian, Fedora, Ubuntu, ...)
  - add patches from Fedora
  - automake dependency removed


author: kukuk@suse.de
changelog:
  - Create new subpackage: dbus-1-nox11
    - contains dbus-launch without x11 support
  - Rename dbus-launch to dbus-launch.x11
  - use update-alternatives to switch between dbus-launch with and
    without X11
  - Solves [bnc#934214]
  - Move dbus-run-session to dbus-1


author: sflees@suse.de
changelog:
  - Remove call to %{insserv_force_if_yast dbus} initscripts are
    removed and this causes errors. bsc#1046173


author: sflees@suse.de
changelog:
  - Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
    * added fix-CVE-2019-12749.patch


author: sflees@suse.de
changelog:
  - Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
    * fix-upstream-userdb-constpointer.patch
    * fix-upstream-CVE-2020-35512.patch
  - Fix CVE-2020-12049 truncated messages lead to resource exhaustion
    (CVE-2020-12049, bsc#1172505)
    * fix-upstream-CVE-2020-12049_2.patch


author: sflees@suse.de
changelog:
  - Fix a potential crash that could be triggered by an invalid signature.
    (CVE-2022-42010, bsc#1204111)
    * fix-upstream-CVE-2022-42010.patch
  - Fix an out of bounds read caused by a fixed length array (CVE-2022-42011,
    bsc#1204112)
    * fix-upstream-CVE-2022-42011.patch
  - A message in non-native endianness with out-of-band Unix file descriptors
    would cause a use-after-free and possible memory corruption CVE-2022-42012,
    bsc#1204113)
    * fix-upstream-CVE-2022-42012.patch
  - Disable asserts (bsc#1087072)
  - Refreshed patches
    * dbus-do-autolaunch.patch
    * increase-backlog.patch
    * fix-upstream-timeout-reset-2.patch
    * fix-upstream-CVE-2020-12049_2.patch


author: daniel.molkentin@suse.com
changelog:
  - Fix merge error (bsc#1142775)
    * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch


author: daniel.molkentin@suse.com
changelog:
  - Fix keymaps not getting included sometimes (bsc#1140872)
    * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
    This requires a backport of the following fixes:
  - 10i18n: Load all keymaps for a given locale (boo#1065058)
    * adds 0608-10i18n-Load-all-keymaps-for-a-given-locale.patch
    * adds 0609-10i18n-Fix-possible-infinite-recursion.patch


author: daniel.molkentin@suse.com
changelog:
  - ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
    * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
  - fixup "Dracut: only login to one target at a time" (bsc#1152650)
    * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
  - 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
    * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch
  - 95iscsi: only login to one target at a time (bsc#1121238)
    * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch


author: thomas.blume@suse.com
changelog:
  - iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
    * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch


author: daniel.molkentin@suse.com
changelog:
  - 01fips: Use correct kernel image name for more platforms (bsc#1164076)
    * add 0618-01fips-Use-correct-kernel-image-name-for-more-platfo.patch


author: daniel.molkentin@suse.com
changelog:
  - 01fips: handle SHA1 on machines without AVX (bsc#1160318)
    * add 0619-01fips-handle-SHA1-on-machines-without-AVX.patch


author: thomas.blume@suse.com
changelog:
  - fix premature did-setup in ifup.sh (bsc#1169030)
    update 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch


author: thomas.blume@suse.com
changelog:
  - fix handling of omit_dracutmodules parameter (bsc#1208929)
    * add 0620-fix-dracut.sh-omission-is-an-addition-to-other-omiss.patch


author: schwab@suse.de
changelog:
  - force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
    to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)


author: schwab@suse.de
changelog:
  - iconv-option-parsing.patch: Rewrite iconv option parsing
    (CVE-2016-10228, bsc#1027496, BZ #19519)


author: schwab@suse.de
changelog:
  - wordexp-param-overflow.patch: wordexp: handle overflow in positional
    parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)


author: schwab@suse.de
changelog:
  - mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
    (CVE-2021-33574, bsc#1186489, BZ #27896)


author: schwab@suse.de
changelog:
  - cancelable-syscall-stack-align.patch: x86: fix stack alignment in
    cancelable syscall stub (bsc#1191835)


author: schwab@suse.de
changelog:
  - dl-sort-maps.patch, dlopen-filter-object.patch: Allow dlopen of filter
    object to work (bsc#1192620, BZ #16272)


author: schwab@suse.de
changelog:
  - hton-identity.patch: Make endian-conversion macros always return correct
    types (bsc#1193478, BZ #16458)


author: schwab@suse.de
changelog:
  - clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
    for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
  - svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
    (CVE-2022-23218, bsc#1194770, BZ #28768)
  - getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
    (CVE-2021-3999, bsc#1194640, BZ #28769)


author: schwab@suse.de
changelog:
  - pthread-cond-wait-stack-align.patch: x86: fix stack alignment in
    pthread_cond_[timed]wait (bsc#1196852)


author: schwab@suse.de
changelog:
  - pop-fail-stack.patch: Assertion failure in pop_fail_stack when executing
    a malformed regexp (CVE-2015-8985, bsc#1193625, BZ #21163)


author: dap.darkness@gmail.com
changelog:
  - Update to version 1.15.4:
    * vlock: New utility which locks one or more virtual consoles.
    * loadkeys: Change the handling of -C option.
    * loadkeys: Fix -d option.
    * Add dvorak-es keymap.
    * Add dvorak-uk keymap (Joe MacMahon).
    * Add dvorak-sv-a1 and dvorak-sv-a5 keymaps.
    * Add ruwin_alt_sh-UTF-8 keymap (Dmitriy Perlow).
  - kbd-1.15.3-po-es.patch was fixed.
  - Applied into upstream patches were deleted.
  - Fixed up via spec-cleaner.
  - Clean-section was removed.
  - Macro warnings were fixed via '%' deleting.


author: dap.darkness@gmail.com
changelog:
  - Update to version 1.15.5:
    * Fix msgstr in es.po and update translations.
    * Update changelog and increase version (1.15.5wip).
    * po: Update vi.po from translationproject.org.
    * Fix various vlock build errors.
    * Fix loadkeys.analyze lex handling.
    * Ignore config.cache files.
  - Applied into upstream kbd-1.15.3-po-es.patch was deleted.


author: crrodriguez@opensuse.org
changelog:
  - Remove sysvinit support, init scripts from this package
    are masked by systemd and only serve for confusion.


author: marceloatie@gmail.com
changelog:
  - Fix data/keymaps/i386/querty/br-abnt2.map
    (boo#984958, kbd-1.15.5-br-abnt2-slash-question.patch)


author: sbrabec@suse.com
changelog:
  - Update to version 2.0.4 from SLE 15 (FATE#325454):
    * Thu Apr  5 17:32:03 CEST 2018 - sbrabec@suse.com
    * Disable characters >=U+F000. These do not work properly
      (bsc#1085432#c15, kbd-unicode-fxxx.patch).
    * Thu Mar 15 17:04:06 CET 2018 - sbrabec@suse.com
    * Do not cause error on UNICODE characters >= 0xF000 (e. g.
      ligature fi) (bsc#1085432, kbd-unicode-fxxx.patch).
    * Fri Jan 12 17:39:18 CET 2018 - sbrabec@suse.com
    * Move initial NumLock handling from systemd back to kbd:
    * Add kbdsettings service written by Thomas Blume (boo#1010880,
      kbdsettings, kbdsettings.service, numlockbios.c,
      update sysconfig.console and sysconfig.keyboard).
    * Exclude numlockbios support for non x86 platforms
      (kbdsettings-nox86.patch).
    * Drop references to KEYTABLE and COMPOSETABLE (boo#1010880#c32,
      boo#1010880#c54,  sysconfig.keyboard.del, README.SUSE,
      drop kbd.fillup).
    * Fix paths in kbd.pl.
    * Wed Dec  6 13:30:49 UTC 2017 - fbui@suse.com
    * Drop from some fill-up templates, a couple of sysconfig variables no
      more read by systemd (fate#319454)
      So the relevant settings can be defined in only one place.
    * Thu Nov 23 13:40:21 UTC 2017 - rbrown@suse.com
    * Replace references to /var/adm/fillup-templates with new
      %_fillupdir macro (boo#1069468)
    * Fri Oct 13 14:53:41 CEST 2017 - sbrabec@suse.com
    * Add vlock.pamd PAM file (bsc#1056449#c8).
    * Clean spec file.
    * Fri Sep 22 15:51:51 CEST 2017 - sbrabec@suse.com
    * Version update to 2.0.4:
    * translation updates
    * support for U+202F
    * minor fixes and code cleanup
    * minor improvements and more characters support
    * Enable vlock (bsc#1056449, FATE#261).
    * Sun Apr 30 04:31:25 UTC 2017 - bwiedemann@suse.com
    * call gzip -n to make build fully reproducible
    * Thu Mar 23 23:23:20 UTC 2017 - zaitor@opensuse.org
    * Revert dropping of kdb-legacy Requires: There are still packages
      and installation flows that needs this to be present
      (boo#1027379).
    * Sun Feb 12 23:37:52 UTC 2017 - zaitor@opensuse.org
    * Drop kdb-legacy Requires: No longer needed, and was always meant
      to be temporary.
    * Tue Jul 12 12:52:31 UTC 2016 - tchvatal@suse.com
    * Version update to 2.0.3:
    * Various small updates
    * Obsolete merged patch:
    * kbd-1.15.5-br-abnt2-slash-question.patch
    * Quickly run over with spec-cleaner
    * Remove arch check for alpha and other unused platforms
    * Drop kbd.fillup.nonpc as it should not be needed nowdays
    * Thu Jun 16 00:18:55 CET 2016 - marceloatie@gmail.com
    * Fix data/keymaps/i386/querty/br-abnt2.map
      (boo#984958, kbd-1.15.5-br-abnt2-slash-question.patch)
    * Thu Dec 10 16:31:10 CET 2015 - tiwai@suse.de
    * Fix missing dependency on coreutils for initrd macros (boo#958562)
    * Call missing initrd macro at postun (boo#958562)
    * Fri Aug 21 10:50:21 UTC 2015 - opensuse.lietuviu.kalba@gmail.com
    * Rename conflicting legacy keymaps:
    * dvorak/no.map -> dvorak/no-dvorak.map
    * fgGIod/trf.map -> fgGIod/trf-fgGIod.map
    * olpc/pt.map -> olpc/pt-olpc.map
    * qwerty/cz.map -> qwerty/cz-qwerty.map
    * i386/qwerty/sr-latin links to sr-cy
    * add compose rules to cz layout (rh#1181581)
    * Mon Aug 10 11:53:48 UTC 2015 - sndirsch@suse.com
    * genmap4systemd.sh: use 'abnt2' model for 'br' layouts, 'jp106'
      model for 'jp' layouts and 'microsoftpro' for anything else
      (instead of 'pc105' before) (FATE#318426)
    * Tue Jul 21 10:05:35 UTC 2015 - sndirsch@suse.com
    * added genmap4systemd.sh tool, which generates entries for
      systemd's /usr/share/systemd/kbd-model-map table from
      xkeyboard-config converted keymaps; entries are written to
      /usr/share/systemd/kbd-model-map.xkb-generated, so these can
      easily be added to /usr/share/systemd/kbd-model-map by systemd
      package (FATE#318426)
    * Fri Jul 17 12:54:27 UTC 2015 - sndirsch@suse.com
    * Include xkb layouts from xkeyboard-config converted to console
      keymaps, (FATE#318426)
    * Rename Finnish xkb converted layout
    * Add xkb and legacy keymaps subdirs to loadkyes search path
      (kbd-1.15.5-loadkeys-search-path.patch), remove symlinks,
      Don't convert layouts that can't input ASCII,
    * Original keymaps moved to legacy dir, created symlinks to xkb
      keymaps
    * Thu Apr  2 18:36:23 UTC 2015 - crrodriguez@opensuse.org
    * For the previos change to wok, we need to buildrequire
      suse-module-tools to get the initrd rpm macros.
    * Sat Mar 28 21:15:08 UTC 2015 - crrodriguez@opensuse.org
    * Regenerate the initrd if this package changes as it is
      included there for early console setup.
    * Tue Feb 10 15:45:09 UTC 2015 - tchvatal@suse.com
    * Convert changelog to utf8
    * Sat Nov 29 22:14:00 UTC 2014 - Led <ledest@gmail.com>
    * fix bashisms in scripts
    * add patches:
    * kbd-2.0.2-fix-bashisms.patch
    * update patches:
    * kbd-1.15.2-unicode_scripts.patch
    * Thu Sep 25 10:33:55 UTC 2014 - pgajdos@suse.com
    * euro{,1,2}.map now produces correct unicode for Euro sign
      [bnc#360993]
    * added patches:
    * kbd-2.0.2-euro-unicode.patch
    * Thu Sep 18 10:54:51 UTC 2014 - pgajdos@suse.com
    * port dumpkeys-C-opt.patch
    * modified patches:
    * kbd-1.15.2-dumpkeys-C-opt.patch
    * Fri Sep 12 09:52:30 UTC 2014 - pgajdos@suse.com
    * kbd-2.0.2-doshell-reference.patch:
      drop doshell reference from openvt.1 man page [bnc#675317]
    * Thu Sep  4 17:51:54 UTC 2014 - jw@owncloud.com
    * added /usr/bin/kbd, a simple userfriedly keymap switcher.
      From https://github.com/jnweiger/kbd-wrapper
    * Fri Aug 22 09:50:15 UTC 2014 - pgajdos@suse.com
    * drop kbd-1.15.2-chvt-userwait.patch [bnc#830805] (internal)
      (--userwait seems to not be used anywhere)
    * Fri Aug 22 09:25:51 UTC 2014 - pgajdos@suse.com
    * remove testutf8 stub (2009: testutf8 will be soon removed completely,
      it's kept only not to break /etc/profile currently)
    * Fri Aug 22 06:51:23 UTC 2014 - pgajdos@suse.com
    * Update to version 2.0.2:
      libkeymap: fix kmap on big-endian machines
      Add functions to get the total number of elements
      Add functions to convert ksyms
      eurlatgr - new Linux console font
      Hide syms array
      Add information about the total number of elements
      Add function to obtain items from the diacritical table
      Change the API for working with the diacritical table
      Change API for working with list of functions
      Add functions to check diacr/func existance
      Add pancyrillic font
      po: Update translations (from translationproject.org)
      vlock: implement PAM account and password management
      vlock: rename ERROR_TIMEOUT macro to LONG_DELAY
      vlock: introduce short delays after non-fatal PAM errors
      Added Latvian keymap
      (changelog taken from
      http://lists.altlinux.org/pipermail/kbd/2014-July/000476.html)
    * add kbd-2.0.2-comment-typo-qwerty.patch [bnc#825385]
    * Thu Jul 24 20:31:47 UTC 2014 - dimstar@opensuse.org
    * No longer recommend fbset: the package does no longer exist in
      openSUSE since late 2013.
    * Sun Nov  3 17:51:09 UTC 2013 - dap.darkness@gmail.com
    * Update to version 2.0.1:
    * Disable arch-specific tests.
    * Fix regression in processing alt_is_meta keyword.
    * Rename Bepo keymaps:
      dvorak-fr-bepo.map -> fr-bepo-latin9.map
      dvorak-fr-bepo-utf8.map -> fr-bepo.map.
    * Deleted kbd-1.15.2-dumpkeys-ppc.patch as obsolete:
      http://lists.opensuse.org/opensuse-factory/2013-08/msg00347.html
    * gcc 4.6+ became required to prevent compilling error:
      "expected declaration specifiers or '...' before 'va_list'".
    * Mon Aug 19 18:27:19 UTC 2013 - dap.darkness@gmail.com
    * Update to version 2.0.0:
    * Add bepo keyboard layout;
    * Add libkeymap;
    * The loadkeys and dumpkeys always use the libkeymap.
    * Updated patches because of docs moved:
    * kbd-1.15.2-chvt-userwait.patch
    * kbd-1.15.2-docu-X11R6-xorg.patch
    * Disabled patches because of dumpkeys rewritten:
    * kbd-1.15.2-dumpkeys-C-opt.patch
    * kbd-1.15.2-dumpkeys-ppc.patch


author: vbabka@suse.cz
changelog:
  - mm: thp: make the THP mapcount atomic against
    __split_huge_pmd_locked() (CVE-2020-29368, bsc#1179660.).
  - commit 2881aaa


author: vbabka@suse.cz
changelog:
  - mm, THP, swap: make reuse_swap_page() works for THP swapped out
    (partial) (CVE-2020-29368, bsc#1179660.).
  - commit 556db3f


author: vkarasulli@suse.de
changelog:
  - wifi: brcmfmac: slab-out-of-bounds read in
    brcmf_get_assoc_ies() (bsc#1209287 CVE-2023-1380).
  - commit 07a41fa


author: vkarasulli@suse.de
changelog:
  - netrom: Fix use-after-free caused by accept on already
    connected socket (bsc#1211186 CVE-2023-32269).
  - commit 5091773


author: jlee@suse.com
changelog:
  - i2c: xgene-slimpro: Fix out-of-bounds bug in
    xgene_slimpro_i2c_xfer() (bsc#1210715 CVE-2023-2194).
  - commit 3e58c3b


author: denis.kirjanov@suse.com
changelog:
  - net: sched: sch_qfq: prevent slab-out-of-bounds in
    qfq_activate_agg (bsc#1210940 CVE-2023-31436).
  - commit a507e94


author: tiwai@suse.de
changelog:
  - media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
    (CVE-2022-45887 bsc#1205762).
  - media: dvb-core: Fix use-after-free due to race condition at
    dvb_ca_en50221 (CVE-2022-45919 bsc#1205803).
  - media: dvb-core: Fix use-after-free due to race at
    dvb_register_device() (CVE-2022-45884 bsc#1205756).
  - media: dvb-core: Fix use-after-free due on race condition at
    dvb_net (CVE-2022-45886 bsc#1205760).
  - media: dvb-core: Fix kernel WARNING for blocking operation in
    wait_event*() (CVE-2023-31084 bsc#1210783).
  - media: dvb-core: Fix use-after-free on race condition at
    dvb_frontend (CVE-2022-45885 bsc#1205758).
  - media: dvbdev: fix error logic at dvb_register_device()
    (CVE-2022-45884 bsc#1205756).
  - media: dvbdev: Fix memleak in dvb_register_device
    (CVE-2022-45884 bsc#1205756).
  - media: media/dvb: Use kmemdup rather than duplicating its
    implementation (CVE-2022-45884 bsc#1205756).
  - commit f7cc9c8


author: tiwai@suse.de
changelog:
  - media: dvb_net: kABI workaround (CVE-2022-45886 bsc#1205760).
  - media: dvb_frontend: kABI workaround (CVE-2022-45885
    bsc#1205758).
  - commit df5f28a


author: mmarek@suse.cz
changelog:
  - testsutie: Uncompress most modules (updated test-files.tar.xz)
  - testsuite: Do not run tests with *.ko.gz if zlib is not enabled
  - Disable compression support, as other tools do not support it
    (e.g. module signing)


author: mmarek@suse.cz
changelog:
  - Updated to kmod 17
    * Do not require xsltproc for build
    * Parse softdeps stored in kernel modules
    * Add experimental python bindings (not enabled in the package yet)
    * Misc bugfixes
  - Deleted patches that went upstream. Only the unsupported modules
    feature remains:
    0002-modprobe-Recognize-allow-unsupported-modules-on-comm.patch
    0003-libkmod-config-Recognize-allow_unsupported_modules-i.patch
    0009-libkmod-Implement-filtering-of-unsupported-modules-o.patch
    0010-modprobe-Implement-allow-unsupported-modules.patch
    0001-Do-not-filter-unsupported-modules-when-running-a-van.patch


author: dvaleev@suse.com
changelog:
  - Fix kernel master build for ppc64le (bsc#1070209)
    depmod-Ignore_PowerPC64_ABIv2_.TOC.symbol.patch


author: mmarek@suse.cz
changelog:
  - libkmod: Handle long lines in /proc/modules (bsc#983754)
    0001-libkmod-Handle-long-lines-in-proc-modules.patch


author: martin.wilck@suse.com
changelog:
  - Fix race while loading modules (bsc#998906)
    * Add 0001-Fix-race-while-loading-modules.patch (upstream fd44a98)


author: msuchanek@suse.com
changelog:
  - Fix resolving .TOC. in modules on 4.4 and older kernel (bsc#1070209)
    depmod-Don-t-add-.TOC.-when-it-s-in-the-kernel.patch


author: msuchanek@suse.de
changelog:
  - Fix module dependency file corruption on parallel invocation (bsc#1118629).
    depmod-Prevent-module-dependency-files-corruption-du.patch
    depmod-Prevent-module-dependency-files-missing-durin.patch


author: msuchanek@suse.de
changelog:
  - Fix warming in libkmod.h (boo#1097869).
    kmod-build-cure-compiler-warnings-showing-up-externa.patch
  - Prevent potential buffer overflow in libkmod (bsc#1118629).
    depmod-shut-up-gcc-insufficinet-buffer-warning.patch


author: tonyj@suse.com
changelog:
  - Fix integer overflow in check_section (CVE-2014-0172, bnc#872785)
    Add patch: elfutils-check-for-overflow-before-calling-malloc-to-uncompress-data.patch


author: tonyj@suse.com
changelog:
  - CVE-2014-9447: elfutils: Directory traversal vulnerability (bnc#911662)
    Add patch: elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch


author: jmoreira@suse.com
changelog:
  - CVE-2017-7613: elfutils: denial of service (memory consumption)
    via a crafted ELF file (bnc#1033090)
    Add patch:
    elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
  - CVE-2017-7612: elfutils: denial of service (heap-based buffer
    over-read and application crash) via a crafted ELF file
    (bnc#1033089)
    Add patch: elfutils-dont-trust-sh_entsize.patch


author: jmoreira@suse.com
changelog:
  - Fix warnings captured by asan while reproducing the bugs below
    Add patch:
    elfutils-prevent-incorrect-memory-read.patch
  - CVE-2016-10254: elfutils: memory allocation failure in allocate_elf
    (common.h) (bnc#1030472)
    Add patch:
    libelf-always-set-elf-maxsize-when-reading.patch
  - CVE-2016-10255: elfutils: memory allocation failure in
    __libelf_set_rawdata_wrlock (elf_getdata.c) (bnc#1030476)
    Add patch:
    libelf-sanity-check-offset-and-size.patch
  - CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
    function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
    Add patch:
    arlib-check-that-sh_entsize-isnt-zero.patch
  - CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
    application crash) via a crafted ELF file (bnc#1033088)
    Add patch:
    elflint-check-symbol-table-data-is-big-enough-before-check.patch
  - CVE-2017-7610: elflint: heap-based buffer overflow in check_group
    (bnc#1033087)
    Add patch:
    elflint-dont-check-section-group-without-flags-word.patch
  - CVE-2018-16062: heap-buffer-overflow in
    /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
    Add patch:
    libdw-readelf-make-sure-there-is-enough-data-to-read.patch
  - CVE-2018-18310: Invalid Address Read problem in
    dwfl_segment_report_module.c (bnc#1111973)
    Add patch:
    libdwfl-sanity-check-partial-core-file-data-reads.patch
  - CVE-2019-7150: dwfl_segment_report_module doesn't check whether
    the dyn data read from core file is truncated (bnc#1123685)
    Add patch:
    libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
  - CVE-2019-7665: NT_PLATFORM core file note should be a zero
    terminated string (CVE is a bit misleading, as this is not a bug
    in libelf as described) (bnc#1125007)
    Add patch:
    libebl-check-NT_PLATFORM-core-notes.patch
  - CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
    (readelf.c) (bnc#1033084)
    Add patch:
    readelf-fix-off-by-one-sanity-check.patch
  - CVE-2018-18520: eu-size: Bad handling of ar files inside are
    files (bnc#1112726)
    Add patch:
    size-handle-recursive-elf-ar-files.patch
  - CVE-2017-7608: heap-based buffer overflow in
    ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
    Add patch:
    use-the-empty-string-for-note-names-with-zero-size.patch


author: jmoreira@suse.com
changelog:
  - CVE-2018-16403: elfutils: Heap-based buffer over-read in
    libdw/dwarf_getabbrev.c and libdw/dwarf_hasattr.c causes crash
    (bnc#1107067)
    Add patch:
    libdw-check-end-of-attributes-list-consistently.patch
  - Add reference number to patch
    elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch


author: martin.liska@suse.com
changelog:
  - Add elfutils-nm-Fix-nm-external-sysv-format-output.patch
    [bsc#1157578].
    Fix nm issue: if index zero wasn't a real symbol it has already
    been filtered out in show_symbols so don't skip it in show_symbols_sysv.


author: jsikes@suse.com
changelog:
  - Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
    * bsc#1200550
    * CVE-2022-2068
    * Fixed more shell code injection issues in c_rehash


author: jsikes@suse.com
changelog:
  - Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
    * bsc#1180995
    * Default to RFC7919 groups when generating ECDH parameters
      using 'genpkey' or 'dhparam' in FIPS mode.


author: otto.hollmann@suse.com
changelog:
  - Update further expiring certificates that affect tests [bsc#1201627]
    * Add openssl-Update-further-expiring-certificates.patch


author: otto.hollmann@suse.com
changelog:
  - Security Fix: [bsc#1207533, CVE-2023-0286]
    * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
      for x400Address
    * Add openssl-CVE-2023-0286.patch
  - Security Fix: [bsc#1207536, CVE-2023-0215]
    * Use-after-free following BIO_new_NDEF()
    * Add patches:
    - openssl-CVE-2023-0215-1of4.patch
    - openssl-CVE-2023-0215-2of4.patch
    - openssl-CVE-2023-0215-3of4.patch
    - openssl-CVE-2023-0215-4of4.patch
    - openssl-Groundwork-for-a-perl-based-testing-framework.patch
    - openssl-Add-recipes-for-the-larger-protocols.patch
  - Security Fix: [bsc#1207534, CVE-2022-4304]
    * Timing Oracle in RSA Decryption
    * Add openssl-CVE-2022-4304.patch


author: otto.hollmann@suse.com
changelog:
  - Fix DH key generation in FIPS mode, add support for constant BN for
    DH parameters [bsc#1202062]
    * Add patch: openssl-fips_fix_DH_key_generation.patch


author: otto.hollmann@suse.com
changelog:
  - Security Fix: [CVE-2023-0464, bsc#1209624]
    * Excessive Resource Usage Verifying X.509 Policy Constraints
    * Add openssl-CVE-2023-0464.patch


author: otto.hollmann@suse.com
changelog:
  - Security Fix: [CVE-2023-0465, bsc#1209878]
    * Invalid certificate policies in leaf certificates are silently ignored
    * Add openssl-CVE-2023-0465.patch
  - Security Fix: [CVE-2023-0466, bsc#1209873]
    * Certificate policy check not enabled
    * Add openssl-CVE-2023-0466.patch


author: otto.hollmann@suse.com
changelog:
  - Security Fix: [CVE-2023-2650, bsc#1211430]
    * Possible DoS translating ASN.1 object identifiers
    * Add openssl-CVE-2023-2650.patch


author: otto.hollmann@suse.com
changelog:
  - Security Fix: [bsc#1207534, CVE-2022-4304]
    * Reworked the Fix for the Timing Oracle in RSA Decryption
      The previous fix for this timing side channel turned out to cause
      a severe 2-3x performance regression in the typical use case
      compared to 1.1.1s.
    * Reworked openssl-CVE-2022-4304.patch
    * Refreshed openssl-CVE-2023-0286.patch


author: vcizek@suse.com
changelog:
  - Obsolete openssl-debuginfo
    * the package doesn't exist any more, has been replaced by
      openssl-{so_version}-debuginfo (bsc#1040172)


author: vcizek@suse.com
changelog:
  - Revert version back to 1.0.2m to get security fixes quickly to
    Tumbleweed
    * OpenSSL Security Advisory [02 Nov 2017] (bsc#1066242,bsc#1056058)


author: vcizek@suse.com
changelog:
  - change the sonum to 1.1, as all the minor versions keep ABI
    compatibility (bsc#1081335)
  - update baselibs.conf


author: vcizek@suse.com
changelog:
  - Packaged for SLE-12-SP4 (fate#325336)
    * point to 1.0.2h
    * adjust baselibs to 1_0_0
    - recommend openssl from libopenssl-devel


author: mmarek@suse.cz
changelog:
  - Update to kernel headers 4.4 (fate#320305).
  - Remove pre-4.4 backports:
    0001-packet-fill-the-gap-of-TPACKET_ALIGNMENT-with-zeros.patch
    0001-powerpc-Include-the-appropriate-endianness-header.patch
    0001-s390-kernel-add-system-calls-for-PCI-memory-access.patch
    0002-packet-deliver-VLAN-TPID-to-userspace.patch


author: mmarek@suse.cz
changelog:
  - Sync <rdma/hfi/hfi1_user.h> with the SLE12-SP2 kernel
    (bsc#973818, fate#319242, bsc#981074).
    Added following patches:
    staging-hfi1-enable-tid-caching-feature.patch
    staging-rdma-hfi1-adjust-eprom-partitions-add-eprom-.patch
    staging-rdma-hfi1-clean-up-macro-indentation.patch
    uapi-hfi1_user-add-command-and-event-for-tid-caching.patch
    uapi-hfi1_user-correct-comment-for-capability-bit.patch


author: mmarek@suse.cz
changelog:
  - Backport ND_CMD_CALL ioctl to <linux/ndctl.h> (FATE#319858, bsc#986519)
    0001-nfit-libnvdimm-limited-whitelisted-dimm-command-mars.patch


author: mmarek@suse.com
changelog:
  - Sync <rdma/hfi/hfi1_user.h> with the SLE12-SP3 kernel (bsc#1040698)
    Added / renamed patches:
    staging-rdma-hfi1-clean-up-macro-indentation.patch
    - > 0001-staging-rdma-hfi1-Clean-up-macro-indentation.patch
    staging-rdma-hfi1-adjust-eprom-partitions-add-eprom-.patch
    - > 0002-staging-rdma-hfi1-Adjust-EPROM-partitions-add-EPROM-.patch
    uapi-hfi1_user-correct-comment-for-capability-bit.patch
    - > 0003-uapi-hfi1_user-Correct-comment-for-capability-bit.patch
    uapi-hfi1_user-add-command-and-event-for-tid-caching.patch
    - > 0004-uapi-hfi1_user-Add-command-and-event-for-TID-caching.patch
    staging-hfi1-enable-tid-caching-feature.patch
    - > 0005-staging-hfi1-Enable-TID-caching-feature.patch
    0006-IB-hfi1-Remove-multiple-device-cdev.patch
    0007-IB-hfi1-Remove-EPROM-functionality-from-data-device.patch
    0008-IB-hfi1-Remove-unused-user-command.patch
    0009-IB-hfi1-Add-ioctl-interface-for-user-commands.patch
    0010-IB-hfi1-Remove-write-use-ioctl-for-user-cmds.patch
    0011-IB-hfi1-Allow-for-non-double-word-multiple-message-s.patch
    0012-IB-hfi1-Disable-header-suppression-for-short-packets.patch
    0013-RDMA-core-Commonize-RDMA-IOCTL-declarations-location.patch
    0014-RDMA-core-Move-legacy-MAD-IOCTL-declarations-to-comm.patch
    0015-RDMA-hfi1-Avoid-redeclaration-error.patch
    0016-RDMA-core-Move-HFI1-IOCTL-declarations-to-common-fil.patch
    0017-RDMA-core-Rename-RDMA-magic-number.patch
    0018-RDMA-core-Unify-style-of-IOCTL-commands.patch


author: schwab@suse.de
changelog:
  - Update to kernel headers 4.12 (bsc#1103375, FATE#318470)
  - Removed patches upstreamed between 4.4 and 4.12:
      0001-staging-rdma-hfi1-Clean-up-macro-indentation.patch
      0002-staging-rdma-hfi1-Adjust-EPROM-partitions-add-EPROM-.patch
      0003-uapi-hfi1_user-Correct-comment-for-capability-bit.patch
      0004-uapi-hfi1_user-Add-command-and-event-for-TID-caching.patch
      0005-staging-hfi1-Enable-TID-caching-feature.patch
      0006-IB-hfi1-Remove-multiple-device-cdev.patch
      0007-IB-hfi1-Remove-EPROM-functionality-from-data-device.patch
      0008-IB-hfi1-Remove-unused-user-command.patch
      0009-IB-hfi1-Add-ioctl-interface-for-user-commands.patch
      0010-IB-hfi1-Remove-write-use-ioctl-for-user-cmds.patch
      0011-IB-hfi1-Allow-for-non-double-word-multiple-message-s.patch
      0012-IB-hfi1-Disable-header-suppression-for-short-packets.patch
      0013-RDMA-core-Commonize-RDMA-IOCTL-declarations-location.patch
      0014-RDMA-core-Move-legacy-MAD-IOCTL-declarations-to-comm.patch
      0015-RDMA-hfi1-Avoid-redeclaration-error.patch
      0016-RDMA-core-Move-HFI1-IOCTL-declarations-to-common-fil.patch
      0017-RDMA-core-Rename-RDMA-magic-number.patch
      0018-RDMA-core-Unify-style-of-IOCTL-commands.patch
      0001-nfit-libnvdimm-limited-whitelisted-dimm-command-mars.patch


author: dimstar@opensuse.org
changelog:
  - BuildIgnore linux-kernel-headers: the symbol will only exist once
    the package was built in a bootstrap cycle.
  - BuildIgnore gettext-tools: required by rpm-build, but we can
    build without it, allowing to shorten a bootstrap cycle.


author: bwiedemann@suse.com
changelog:
  - Don't embed build system's kernel version in rpm
    to make package build reproducible (boo#1101107)


author: werner@suse.de
changelog:
  - Add patch ncurses-5.9-bsc1115929.patch
    * For bug bsc#1115929 port back null pointer checks to catch e.g.
      the crash in _nc_parse_entry(), belongs to CVE-2018-19211


author: werner@suse.de
changelog:
  - Modify patch ncurses-5.9-bsc1115929.patch as the change in
    form_driver() breaks ncurses-5.9 and the variable move_after_insert
    of ncurses-6.1 is not known in 5.9 (bsc#1121450)


author: werner@suse.de
changelog:
  - Add patch ncurses-5.9-bsc1131830.patch which is a backport from
    6.1 to fix a crash seen in 5.9 (bsc#1131830, CVE-2018-10754)


author: werner@suse.de
changelog:
  - Add patches
    CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
      buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
    CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
      buffer over-read in fmt_entry function in tinfo/comp_hash.c


author: werner@suse.de
changelog:
  - Fix last change, that is add missed library linker paths as well
    as missed include directories for none standard paths (bsc#1158586,
    bsc#1159162)
  - Let helper script handle.linux call sed command smart


author: werner@suse.de
changelog:
  - Also remove private requirements as (lib)tinfo are binary compatible
    with normal and wide version of (lib)ncurses (bsc#1158586, bsc#1159162)


author: wfeldt@opensuse.org
changelog:
  - merge gh#openSUSE/perl-bootloader#136
  - report error if config file could not be updated (bsc#1188768)
  - 0.936


author: wfeldt@opensuse.org
changelog:
  - merge gh#openSUSE/perl-bootloader#137
  - grub2 install: Support secure boot on powerpc (bsc#1192764
    jsc#SLE-18271).
  - 0.937


author: wfeldt@opensuse.org
changelog:
  - merge gh#openSUSE/perl-bootloader#138
  - grub2/install: reset error code when passing through recover code
    (bsc#1198197)
  - 0.938


author: wfeldt@opensuse.org
changelog:
  - merge gh#openSUSE/perl-bootloader#142
  - use fw_platform_size to distinguish between 32 bit and 64 bit
    UEFI platforms (bsc#1208003)
  - 0.942


author: wfeldt@opensuse.org
changelog:
  - merge gh#openSUSE/perl-bootloader#147
  - UEFI: update also default location, if it is controlled by SUSE
    (bsc#1210799, bsc#1201399)
  - 0.943


author: wfeldt@opensuse.org
changelog:
  - merge gh#openSUSE/perl-bootloader#152
  - use signed grub EFI binary when updating grub in default EFI
    location (bsc#1210799)
  - check whether grub2-install supports --suse-force-signed option
  - 0.944


author: coolo@novell.com
changelog:
  - Readd pkg-config-dnl.patch, see
    http://lists.gnu.org/archive/html/autoconf/2010-07/msg00035.html


author: dimstar@opensuse.org
changelog:
  - Update to version 0.27:
    + Drop usage of popt for equivalent API in glib2
    + Add back an internal snapshot of glib2 to break circular
      dependency
    + Fix --exists to check for Requires and Requires.private.
    + Various fixes for MinGW which should allow it to be used
      unpatched on that system
    + New autoconf macros PKG_INSTALLDIR and PKG_NOARCH_INSTALLDIR to
      help determine the .pc file install directory
    + Fix handling of --exact/atleast/max-version vs. =/>=/<=
    + Fix errors in man page source
    + Ensure testing only searches in the check directory
    + Bump glib requirement to 2.16 to avoid deprecated
      g_win32_get_package_installation_subdirectory()
    + Autotools refresh and update
    + Use g_alloca from glib instead of figuring out alloca ourselves
    + Remove search for setresuid & setreuid only needed for internal
      popt
    + Bugs fixed: fdo#833, fdo#2458, fdo#5214, fdo#5326, fdo#5703,
      fdo#6074, fdo#8653, fdo#9135, fdo#9143, fdo#9584, fdo#10652,
      fdo#11464, fdo#14396, fdo#17053, fdo#23922, fdo#28776,
      fdo#29011, fdo#29801, fdo#31699, fdo#31700, fdo#32622,
      fdo#34382, fdo#37266, fdo#39646, fdo#41081, fdo#43149,
      fdo#44843, fdo#45599, fdo#45742, fdo#48743
  - Changes from version 0.26:
    + Build system fixes
    + More tests
    + pkg.m4 fixups which makes autoconf 2.66 happier.
    + Drop support for legacy -config scripts.  Those should already
      be gone and cause problems in cross-compilation environments.
    + Drop embedded glib
    + Fix up pkg.m4 to handle the case of --exists working and
    - -cflags or --libs failing.
    + Various documentation updates
    + Allow $() through without escaping it.
    + Add --with-system-include-path instead of hard-coding
      /usr/include.
  - Pass --with-internal-glib to configure. We don't want to have a
    build cycle with glib, so we use the interal version.
  - Clean up spec-file using spec-cleaner and manually.
  - Drop pkg-config-dnl.patch: fixed upstream.


author: dimstar@opensuse.org
changelog:
  - Update to version 0.27.1:
    + Various fixes for using the internal glib snapshot. It should
      now be usable pretty much everywhere with the exception that
      universal builds are not supported on OS X.
    + Remove usage of gettext from the internal glib to avoid gettext
      and libintl dependencies
    + Update internal glib snapshot to 2.32.4
    + Fix check for POSIX shell used in tests to work better
    + Handle spaces in autodetected prefix on Windows
    + Bugs fixed: fdo#3550, fdo#51883, fdo#52031, fdo#53493.


author: p.drouand@gmail.com
changelog:
  - Update to version 0.28:
    + Fixed a pair of long-standing and intertwined bugs involving
      unwanted removal of flags:
    - Other Libs flags like -Wl are now kept in context order
      with -l flags.
    - Aggressive removal of all duplicate arguments has been scaled
      back so that just consecutive duplicate arguments are
      removed. One result of this change is that some flags could
      be repeated in the final output, especially flags from
      non-pkg-config packages like -lm. Since pkg-config rarely has
      enough knowledge here about the right thing to do, we throw
      the duplicate arguments at the compiler/linker and trust it
      will do the right thing.
    + Fixed an old bug to allow circular Requires. This fix brings
      along a small behavior change in that pkg-config resolves
      requires depth first, causing some lower level flags to show up
      earlier in the output than previously.
    + Cleaned up many corner-case bugs and ambiguous behavior in
      pkg-config's interface.
    + New autoconf macro PKG_CHECK_VAR for reading variables from .pc
      files.
    + Default to suppressing -L/lib and/or -L/lib64 like their /usr
      counterparts.
    + To help support multiarch scenarios out of the box,
      $host-pkg-config is now installed unless --disable-host-tool
      is passed to configure.
    + Added optional gcov usage through the --with-gcov configure
      option. As a result, many more tests were added to greatly
      increase the coverage of the code to 86% of executed lines on a
      Fedora 18 machine.
    + Bugs fixed: fdo#130, fdo#7331, fdo#16101, fdo#17053, fdo#19950,
      fdo#34504, fdo#48098, fdo#54231, fdo#54271, fdo#54379,
      fdo#54384, fdo#54386, fdo#54388, fdo#54389, fdo#54390,
      fdo#54391, fdo#54427, fdo#54463, fdo#54716, fdo#57078,
      fdo#58363, fdo#59435.


author: dvaleev@suse.com
changelog:
  - Don't redefine _arch, but use file pattern instead. This ensures
    we don't have to run fixing each and every arch.


author: josef.moellers@suse.com
changelog:
  - Parse new DRC Info: Define data structures to support parsing
    the new "ibm,drc-info" device tree property.  Integrate the new
    property information into the existing search mechanisms of the
    userspace 'drmgr' driver.
    [jsc#SLE-11094, jsc#SLE-11193, jsc#SLE-11092, jsc#SLE-11319, jsc#ECO-935,
    bsc#1158312, bsc#1161925, fate#326955
    bug-1158312-parse-ibm-drc-info-property.patch]
  - Bump package version to be able to tell the fix for jsc#SLE-11092 is included
    Kernel can depend on the fixed version this way.


author: josef.moellers@suse.com
changelog:
  - * Deal with error messages returned sometimes by evaluation
      of ${devspec} in 'ofpathname'.
    * Strip embedded nulls from values provided by kernel files.
    * Redirect more error messages to /dev/null
    [bsc#1116561,
    0001-powerpc-utils-Suppress-errors-reading-kernel-files.patch]


author: josef.moellers@suse.com
changelog:
  - Fixed one instance where the previous change corrupted the
    exit status of a command.
    Redirected two error messages to stderr.
    [bsc#1164068,
    0001-powerpc-utils-Suppress-errors-reading-kernel-files.patch]


author: josef.moellers@suse.com
changelog:
  - Reduce the number of searches of /sys by each invocation
    of 'ofpathname' to at most one (1) by caching the content of a
    single search into a file in /tmp, and using 'grep' to identify
    the appropriate files for further examination.
    [bsc#1164726,
    0002-Reduce-number-of-searches-of-sys-hierarchy.patch]


author: josef.moellers@suse.com
changelog:
  - Reduce the number of searches of /sys by searching directly in
    /sys/class/block. This patch obsoletes
    0002-Reduce-number-of-searches-of-sys-hierarchy.patch
    [bsc#1164726,
    0002-Reduce-number-of-searches-of-sys-hierarchy.patch,
    bsc1164726-search-only-part-of-sys.patch]


author: josef.moellers@suse.com
changelog:
  - Remove a trailing NUL ('\0') byte from a vendor_id contents.
    [bsc#1171892, bsc1171892-get-rid-of-trainling-NUL.patch]


author: msuchanek@suse.de
changelog:
  - Add patch metadata, refresh to upstream version where available.
    * Refreshed 0001-powerpc-utils-Suppress-errors-reading-kernel-files.patch
  - The above patch was modified to fix bsc#1164068. Add a separate patch for
    that (bsc#1164068).
    * Added Fix-ofpathname-Could-not-retrieve-logical-device-nam.patch
  - Stop using /sbin/udevadm symlink (boo#1160890).
    * Added ofpathname-Fix-udevadm-location.patch


author: msuchanek@suse.de
changelog:
  - ofpathname: Fix lookup of disk partitions (bsc#1173403 ltc#186427)
    * Added ofpathname-make-goto_dir-canonicalize-directory-argu.patch


author: ro@suse.de
changelog:
  - add patch fix_kexec_service_name_for_suse.patch
    on SUSE the service is called kexec-load.service instead
    of kexec.service (bsc#1174666)


author: jlee@suse.com
changelog:
  - Add modhash tool to calculate hash of signed module.
    It strips X.509 or PKCS#7 signature before hash kernel module.
    (fate#319460)


author: mwilck@suse.com
changelog:
  - Update to version 12.5:
    * spec file: add conflicts for dracut < 44.2 (bsc#1127891)
    * modprobe.conf.common: add csiostor->cxgb4 dependency
      (bsc#1100989, bsc#1131635)
  - Fix driver-check.sh (boo#1123697, boo#1123704)
  - modsign-verify: support for parsing PKCS#7 signatures
    (bsc#1111300, bsc#1105495)


author: mwilck@suse.com
changelog:
  - Update to version 12.6:
    * weak-modules2: emit "inconsistent" warning only if replacement fails
    (bsc#1127155)


author: mwilck@suse.com
changelog:
  - Update to version 12.6.1: Import kernel scriptlets from kernel-source
    * rpm-script: fix bad exit status in OpenQA (bsc#1191922)
    * cert-script: Deal with existing $cert.delete file (bsc#1191804).
    * cert-script: Ignore kernel keyring for kernel certificates (bsc#1191480).
    * cert-script: Only print mokutil output in verbose mode.
    * inkmp-script(postun): don't pass  existing files to weak-modules2
      (boo#1191200)
    * kernel-scriptlets: skip cert scriptlet on non-UEFI systems
      (boo#1191260)
    * rpm-script: link config also into /boot (boo#1189879)
    * Import kernel scriptlets from kernel-source.
      (bsc#1189841, bsc#1190598)
    * Provide "suse-kernel-rpm-scriptlets"


author: fbui@suse.com
changelog:
  - Import commit 3fad90a5e2a1d0099ba2925793df42e0084cad35
    dbf8419fdb busctl: add a timestamp to the output of the busctl monitor command (bsc#1180225 jsc#SLE-21861)
    7a9abad886 sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (bsc#1191399)
    7dd902bfa6 manager: reexecute on SIGRTMIN+25, user instances only
    fb9e399bca basic/unit-name: do not use strdupa() on a path (bsc#1188063 CVE-2021-33910)
    e0fde642ec logind: terminate cleanly on SIGTERM/SIGINT (bsc#1188018)
    fe106cccdd units: make fsck/grows/makefs/makeswap units conflict against shutdown.target


author: fbui@suse.com
changelog:
  - Import commit 81e1235110a58f78e4e7514b45a2897ceddadf88
    8348b7f7ea systemd-coredump: allow setting external core size to infinity (bsc#1195899 jsc#SLE-23869 jsc#SLE-23871)
    d827639164 systemctl: exit with 1 if no unit files found (bsc#1193841)
    99d0949499 umount: show correct error message
    16f9b8a5fa core/umount: fix unitialized fields in MountPoint in dm_list_get()
    8f7b39e250 umount: Add more asserts and remove some unused arguments
    6858714b68 umount: Fix memory leak
    4a83c21fb1 mount-util: fix fd_is_mount_point() when both the parent and directory are network fs (bsc#1190984)


author: fbui@suse.com
changelog:
  - Import commit d2bcac88a6f3e540774efcd9ab12672da12cf3fe
    7076cc48ad core: make sure we always free the list of changes
    1d69ad935b Install: correctly report symlink creations
    0ea76851fb core: make sure we generate a nicer error when a linked unit is attempted to be enabled
    8c4d1006cc install: unify checking whether operations may be applied to a unit file in a new function
    f072dc87b0 install: fix errno handling
    ca63895cec systemctl: Allow 'edit' and 'cat' on unloaded units
    f535ae8ee3 Don't open /var journals in volatile mode when runtime_journal==NULL
    d6c79be377 udev: 60-persistent-storage-tape.rules: handle duplicate device ID (bsc#1195529)
    c6274db870 man: tweak description of auto/noauto (bsc#1191502)


author: fbui@suse.com
changelog:
  - Import commit 417bb0944e035969594fff83a3ab9c2ca9a56234
    e4ba341080 time-util: fix buffer-over-run (bsc#1204968 CVE-2022-3821)
    20743c1a44 logind: fix crash in logind on user-specified message string
    b971b5f085 tmpfiles: check the directory we were supposed to create, not its parent
    2850271ea6 stat-util: replace is_dir() + is_dir_fd() by single is_dir_full() call
    3d3bd5fc8d systemd --user: call pam_loginuid when creating user@.service (#3120) (bsc#1198507)
    4b56c3540a parse-util: introduce pid_is_valid()
    aa811a4c0c systemd-detect-virt: refine hypervisor detection (#7171) (bsc#1197244)


author: fbui@suse.com
changelog:
  - Fix systemd-coredump to not allow user to access coredumps with changed
    uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
    Add 5000-errno-util-add-new-errno_or_else-helper.patch
    Add 5001-coredump-do-not-allow-user-to-access-coredumps-with-.patch


author: fbui@suse.com
changelog:
  - Disable coredump support when building the mini flavor to avoid pulling in
    elfutils as some elf macro definitions are now needed by coredump.c


author: fbui@suse.com
changelog:
  - Import commit 284594087815b5a621c9cbdfd7fde382c3fa110e
    408bdd5b5c units: restore RemainAfterExit=yes in systemd-vconsole-setup.service
    c9d71f32e9 vconsole-setup: don't concat strv if we don't need to (i.e. not in debug log mode)
    36cea26f87 vconsole-setup: add more log messages
    ed5157ad87 units: restore Before dependencies for systemd-vconsole-setup.service
    e9ae2bacc4 vconsole-setup: add lots of debug messages
    40b348e753 Add enable_disable() helper
    33ac2fa67a vconsole: correct kernel command line namespace
    41e28b24d6 vconsole: Don't do static installation under sysinit.target
    d5a5e14c0b vconsole: use KD_FONT_OP_GET/SET to handle copying (bsc#1181636)
    4e62cab082 vconsole: updates of keyboard/font loading functions
    8fd6316be5 vconsole: Add generic is_*() functions
    a755ea98ec vconsole: add two new toggle functions, remove old enable/disable ones
    9ca3cfe2aa vconsole: copy font to 63 consoles instead of 15
    7ddfcaab83 vconsole: add log_oom() where appropriate
    8d61f5bde5 vconsole-setup: Store fonts on heap (#3268)
    6efe43abe2 coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
    1f09db3094 errno-util: add new errno_or_else() helper
  - Drop 5000-errno-util-add-new-errno_or_else-helper.patch
      5001-coredump-do-not-allow-user-to-access-coredumps-with-.patch
    They have been integrated in SUSE/v228, see above.


author: fbui@suse.com
changelog:
  - Import commit 95ad6444b8d4c9cbd6c745ba9b4463264109ee11
    acb6da7b4a pager: make pager secure when under euid is changed or explicitly requested
    7c8bbe16a2 pager: set $LESSSECURE whenver we invoke a pager (bsc#1208958 CVE-2023-26604)
    e931881112 core: if the start command vanishes during runtime don't hit an assert (bsc#1206985)


author: trenn@suse.de
changelog:
  - Do not start mcelog service based on an udev (/dev/mcelog) rule
    (bsc#976781), but enable it automatically at install time.


author: ohering@suse.de
changelog:
  - enable xencommons (bnc#897352, bnc#1012842)
    xendomains must be enabled manually by the local admin (bnc#937371)


author: fbui@suse.com
changelog:
  - Enable by default uuidd shipped by util-linux (bsc#1012850)
    util-linux was previously shipping a preset file enabling uuidd by
    default. This is now done here as other packages are not supposed to
    ship their own preset rules.
    Also increase the package version so util-linux can conflict with
    the previous versions and hence will be updated *after* the new
    version of the presets package is. This is important otherwise if
    util-linux removed its preset file first, then the presets package
    would believe a new change in the presets and you enable again
    uuidd.


author: sbrabec@suse.com
changelog:
  - Bump version to 12.2 to make version numbers consistent between
    SLE and Leap (boo#1029775).
  - Remove superfluous uuidd.service. uuidd.socket is sufficient
    (bsc#1012850#c8).


author: sschricker@suse.com
changelog:
  - enable nvmefc-boot-connections.service to discover
    network-provided nvme drives on boot (bsc#1128428)


author: idonmez@suse.com
changelog:
  - Update to version 1.2.8
    * Add new inflateGetDictionary() function
    * Fix bug where gzopen() immediately followed by gzclose()
      would write an empty file instead of an empty gzip stream.
    * Fix bug in gzclose() when gzwrite() runs out of memory


author: tchvatal@suse.com
changelog:
  - Remove zlib-devel-static, nothing should use libz.a anyway.
  - Package minizip library, everything using it should now pull
    minizip-devel and unbundle it bnc#935864


author: tchvatal@suse.com
changelog:
  - Include fixes for bnc#1003580 bnc#1003579 bnc#1003577 bnc#1013882:
    * zlib-bnc1003577.patch
    * zlib-bnc1003579-part2.patch
    * zlib-bnc1003579.patch
    * zlib-bnc1003580.patch refreshed
    * zlib-bnc1013882.patch CVE-2016-9843


author: tchvatal@suse.com
changelog:
  - Add patch to safeguard against negative values in uInt bsc#1071321:
    * 0001-Do-not-try-to-store-negative-values-in-unsigned-int.patch


