# changelog

author: werner@suse.de
changelog:
  - add patch git-26-ee32da3058ea9880ccc4340d1958e9c484775f83.patch
    to fix spurious assignment to unknown variable term from
    /etc/inputrc (boo#1022105)


author: werner@suse.de
changelog:
  - Add patch git-27-c0ecf2e203db2b03e684132669563f7ca71edac4.patch
    to make lang.csh work again (bsc#1025673)


author: werner@suse.de
changelog:
  - Add patch git-28-4555aa28348043b69ef0c66442eff95c1c6398c8.patch
    support changing PS1 even for mksh and user root (bsc#1036895)


author: dimstar@opensuse.org
changelog:
  - Add aaa_base-pullreq42-default-wm.patch: Set DEFAULT_WM to
    'default'; the pre-existing setting is overwritten by YaST on SLE
    during installation (kde-plasma is not even a valid option for
    SLE) (boo#1030873).


author: werner@suse.de
changelog:
  - Add patch git-29-b9a57d5a64b3d2d09bc591f894f6558f1945df70.patch
    Unset unused variables on profile files (bsc#1049577)
  - Add patch git-30-4ad097303df998e830fffeda8c5a990d0bec6de9.patch
    Unset id in csh.cshrc instead of profile.csh (bsc#1049577)
  - Add patch git-31-cc9e34e45854d7313e07a0f4b2cc41b720a16003.patch
    Allow that personal ~/.bashrc is read again (boo#1052182)
  - Add patch git-32-20687eff2438980a54dbd073fc4a754d2987faae.patch
    Avoid that IFS becomes global in _ls ksh shell function
    (bsc#1079674, bsc#1025743)


author: ro@suse.de
changelog:
  - add aaa_base-pre_post-bug-1038549.patch
    replace "cat > file" by "mv -f ... file" in pre/post to
    fix issues with clients having these files mmapped (bnc#1038549)


author: werner@suse.de
changelog:
  - Add patch git-33-04c9daea971d58248c64076d41315129a7083629.patch
    * In bash.bashrc move ssh/sudo source of profile to avoid removing
      the `is' variable before last use (boo#1088524)
    * Avoid the shell code checker stumble over `function' keys
      word in ls.bash (git#54).


author: werner@suse.de
changelog:
  - Add patch git-35-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
    No error at login if java system directory is empty (bsc#1102310)


author: ro@suse.de
changelog:
  -  Add patch git-34-011e1546bd1092c2a8c9754866ca02439ed23d54.patch
    * Get mixed use case of service wrapper script straight
      (bsc#1040613)


author: ro@suse.de
changelog:
  - add patch git-36-7a00987c0df059cc1495cba7d70d319593d4cfed.patch
    test for xdgdir/applications before adding data dir (bsc#1095969)


author: mkoutny@suse.com
changelog:
  - Added patches:
    * fix-timeout-reset.patch
      + Correctly reset timeouts for pending file descriptors
      (bsc#978477)
    * increase-backlog.patch
      + increase listen() backlog of AF_UNIX sockets to SOMAXCONN
      (bsc#980928)


author: fstrba@suse.com
changelog:
  - Update to 1.8.22:
    * Security fixes:
      + Do not treat ActivationFailure message received from
      root-owned systemd name as a format string. In principle this
      is a security vulnerability, but we do not believe it is
      exploitable in practice, because only privileged processes can
      own the org.freedesktop.systemd1 bus name, and systemd does
      not appear to send activation failures that contain "%".
      Please note that this probably *was* exploitable in dbus
      versions older than 1.6.30, 1.8.16 and 1.9.10 due to a missing
      check which at the time was only thought to be a denial of
      service vulnerability (CVE-2015-0245). If you are still
      running one of those versions, patch or upgrade immediately.
      (fdo#98157, bsc#1003898, Simon McVittie)
    * Security hardening:
      + On Unix platforms, change the default configuration for the
      session bus to only allow EXTERNAL authentication (secure
      kernel-mediated credentials-passing), as was already done for
      the system bus.
      This avoids falling back to DBUS_COOKIE_SHA1, which relies on
      strongly unpredictable pseudo-random numbers; under certain
      circumstances (/dev/urandom unreadable or malloc() returns
      NULL), dbus could fall back to using rand(), which does not
      have the desired unpredictability. The fallback to rand() has
      not been changed in this stable-branch since the necessary
      code changes for correct error-handling are rather intrusive.
      If you are using D-Bus over the (unencrypted!) tcp: or
      nonce-tcp: transport, in conjunction with DBUS_COOKIE_SHA1 and
      a shared home directory using NFS or similar, you will need to
      reconfigure the session bus to accept DBUS_COOKIE_SHA1 by
      commenting out the <auth> element. This configuration is not
      recommended.
    * Other fixes:
      + Fix a memory leak when GetConnectionCredentials() succeeds
      (fdo#91008, Jacek Bukarewicz)
      + Ensure that dbus-monitor does not reply to messages intended
      for others (fdo#90952, Simon McVittie)
      + Add locking to DBusCounter's reference count and notify
      function (fdo#89297, Adrian Szyndela)
      + Ensure that DBusTransport's reference count is protected by
      the corresponding DBusConnection's lock (fdo#90312, Adrian
      Szyndela)
      + On Windows, listen on the same port for IPv4 and IPv6
      (previously broken by an endianness mistake), and fix a
      failure to bind TCP sockets on approximately 1 attempt in 256
      (fdo#87999, Ralf Habacker)
      + Correctly release DBusServer mutex before early-return if we
      run out of memory while copying authentication mechanisms
      (fdo#90021,  Ralf Habacker)
      + Correctly initialize all fields of DBusTypeReader (fdo#90021;
      Ralf Habacker, Simon McVittie)
      + Fix some missing \n in verbose (debug log) messages
      (fdo#90004, Ralf Habacker)
      + Clean up some memory leaks in test code (fdo#90021, Ralf
      Habacker)


author: kukuk@suse.de
changelog:
  - Create new subpackage: dbus-1-nox11
    - contains dbus-launch without x11 support
  - Rename dbus-launch to dbus-launch.x11
  - use update-alternatives to switch between dbus-launch with and
    without X11
  - Solves [bnc#934214]
  - Move dbus-run-session to dbus-1


author: sflees@suse.de
changelog:
  - Remove call to %{insserv_force_if_yast dbus} initscripts are
    removed and this causes errors. bsc#1046173


author: msuchanek@suse.com
changelog:
  - 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352).
    * adds 0586-95zfcp_rules-parse-zfcp.sh-remove-rule-existence-check.patch


author: daniel.molkentin@suse.com
changelog:
  - Fix a missing space in example configs (boo#1121251)
    * adds 0587-Fix-a-missing-space-in-example-configs.patch


author: daniel.molkentin@suse.com
changelog:
  -  emergency mode: bring shell and all vital information to
    all ttys specified as console devices
    (FATE#325386, bsc#1053248, bsc#937555)
    * Adds 0585-emergency-mode-use-sulogin.patch
  - Fix displaying text on emergency consoles (boo#1124088)
    * adds 0589-Fix-displaying-text-on-emergency-consoles.patch


author: daniel.molkentin@suse.com
changelog:
  - 91zipl: Don't use contents of commented lines (osc#1119499)
    * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch


author: daniel.molkentin@suse.com
changelog:
  - Correct fix for displaying text on emergency consoles (boo#1124088)
    * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
    * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
  - 95iscsi: handle qedi like bnx2i (bsc#1113712)
    * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch


author: daniel.molkentin@suse.com
changelog:
  - purge-kernels: Avoid endless loop when uninstalling kernels that depend on
    KMPs which in themselves depend on other packages (bsc#1125327)


author: daniel.molkentin@suse.com
changelog:
  - Check SUSE kernel module dependencies recursively (bsc#1127891)
    * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
  - Avoid "Failed to chown ... Operation not permitted" when run from non-root,
    by not copying xattrs. (osc#1092178)
    * adds 0593-dracut-only-copy-xattr-if-root.patch


author: schwab@suse.de
changelog:
  - pthread-create-use-after-free.patch: Fix use after free in
    pthread_create (bsc#1053188, BZ #20116)
  - libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
    (bsc#1070905, BZ #19590)
  - dl-init-paths-overflow.patch: Count components of the expanded path in
    _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
    [#22607], BZ #22627)
  - fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
    string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
  - power6-memset.patch: Fix cmpli usage in power6 memset
  - aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
  - realpath-underflow.patch: Avoid underflow of malloced area
    (CVE-2018-1000001, bsc#1074293)


author: schwab@suse.de
changelog:
  - sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
    in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
  - reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
    (CVE-2017-12132, bsc#1051791, BZ #21361)
  - memalign-overflow.patch: Fix integer overflows in internal memalign and
    malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
    BZ #22774)


author: schwab@suse.de
changelog:
  - clntudp-call-use-after-free.patch: Avoid use-after-free read access in
    clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)


author: schwab@suse.de
changelog:
  - res-send-enomem.patch: Fix crash in resolver on memory allocation
    failure (bsc#1086690, BZ #23005)


author: schwab@suse.de
changelog:
  - i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
    2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
  - mempcpy-avx512.patch: Don't write beyond destination in
    __mempcpy_avx512_no_vzeroupper (CVE-2018-11237, bnc#1094154, BZ #23196)
  - realpath-ssize-max-overflow.patch: Fix overflow in path length
    computation (CVE-2018-11236, bsc#1094161, BZ #22786)


author: schwab@suse.de
changelog:
  - aarch64-elf-machine-load-address.patch: Rewrite elf_machine_load_address
    using _DYNAMIC symbol (bsc#1112858)


author: schwab@suse.de
changelog:
  - ld-so-cache-validation.patch: Add more checks for valid ld.so.cache file
    (bsc#1110661, BZ #18093)


author: matz@suse.com
changelog:
  - japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
    Japanese era (bsc#1100396, BZ #22964)


author: dap.darkness@gmail.com
changelog:
  - Update to version 1.15.4:
    * vlock: New utility which locks one or more virtual consoles.
    * loadkeys: Change the handling of -C option.
    * loadkeys: Fix -d option.
    * Add dvorak-es keymap.
    * Add dvorak-uk keymap (Joe MacMahon).
    * Add dvorak-sv-a1 and dvorak-sv-a5 keymaps.
    * Add ruwin_alt_sh-UTF-8 keymap (Dmitriy Perlow).
  - kbd-1.15.3-po-es.patch was fixed.
  - Applied into upstream patches were deleted.
  - Fixed up via spec-cleaner.
  - Clean-section was removed.
  - Macro warnings were fixed via '%' deleting.


author: dap.darkness@gmail.com
changelog:
  - Update to version 1.15.5:
    * Fix msgstr in es.po and update translations.
    * Update changelog and increase version (1.15.5wip).
    * po: Update vi.po from translationproject.org.
    * Fix various vlock build errors.
    * Fix loadkeys.analyze lex handling.
    * Ignore config.cache files.
  - Applied into upstream kbd-1.15.3-po-es.patch was deleted.


author: crrodriguez@opensuse.org
changelog:
  - Remove sysvinit support, init scripts from this package
    are masked by systemd and only serve for confusion.


author: marceloatie@gmail.com
changelog:
  - Fix data/keymaps/i386/querty/br-abnt2.map
    (boo#984958, kbd-1.15.5-br-abnt2-slash-question.patch)


author: sbrabec@suse.com
changelog:
  - Update to version 2.0.4 from SLE 15 (FATE#325454):
    * Thu Apr  5 17:32:03 CEST 2018 - sbrabec@suse.com
    * Disable characters >=U+F000. These do not work properly
      (bsc#1085432#c15, kbd-unicode-fxxx.patch).
    * Thu Mar 15 17:04:06 CET 2018 - sbrabec@suse.com
    * Do not cause error on UNICODE characters >= 0xF000 (e. g.
      ligature fi) (bsc#1085432, kbd-unicode-fxxx.patch).
    * Fri Jan 12 17:39:18 CET 2018 - sbrabec@suse.com
    * Move initial NumLock handling from systemd back to kbd:
    * Add kbdsettings service written by Thomas Blume (boo#1010880,
      kbdsettings, kbdsettings.service, numlockbios.c,
      update sysconfig.console and sysconfig.keyboard).
    * Exclude numlockbios support for non x86 platforms
      (kbdsettings-nox86.patch).
    * Drop references to KEYTABLE and COMPOSETABLE (boo#1010880#c32,
      boo#1010880#c54,  sysconfig.keyboard.del, README.SUSE,
      drop kbd.fillup).
    * Fix paths in kbd.pl.
    * Wed Dec  6 13:30:49 UTC 2017 - fbui@suse.com
    * Drop from some fill-up templates, a couple of sysconfig variables no
      more read by systemd (fate#319454)
      So the relevant settings can be defined in only one place.
    * Thu Nov 23 13:40:21 UTC 2017 - rbrown@suse.com
    * Replace references to /var/adm/fillup-templates with new
      %_fillupdir macro (boo#1069468)
    * Fri Oct 13 14:53:41 CEST 2017 - sbrabec@suse.com
    * Add vlock.pamd PAM file (bsc#1056449#c8).
    * Clean spec file.
    * Fri Sep 22 15:51:51 CEST 2017 - sbrabec@suse.com
    * Version update to 2.0.4:
    * translation updates
    * support for U+202F
    * minor fixes and code cleanup
    * minor improvements and more characters support
    * Enable vlock (bsc#1056449, FATE#261).
    * Sun Apr 30 04:31:25 UTC 2017 - bwiedemann@suse.com
    * call gzip -n to make build fully reproducible
    * Thu Mar 23 23:23:20 UTC 2017 - zaitor@opensuse.org
    * Revert dropping of kdb-legacy Requires: There are still packages
      and installation flows that needs this to be present
      (boo#1027379).
    * Sun Feb 12 23:37:52 UTC 2017 - zaitor@opensuse.org
    * Drop kdb-legacy Requires: No longer needed, and was always meant
      to be temporary.
    * Tue Jul 12 12:52:31 UTC 2016 - tchvatal@suse.com
    * Version update to 2.0.3:
    * Various small updates
    * Obsolete merged patch:
    * kbd-1.15.5-br-abnt2-slash-question.patch
    * Quickly run over with spec-cleaner
    * Remove arch check for alpha and other unused platforms
    * Drop kbd.fillup.nonpc as it should not be needed nowdays
    * Thu Jun 16 00:18:55 CET 2016 - marceloatie@gmail.com
    * Fix data/keymaps/i386/querty/br-abnt2.map
      (boo#984958, kbd-1.15.5-br-abnt2-slash-question.patch)
    * Thu Dec 10 16:31:10 CET 2015 - tiwai@suse.de
    * Fix missing dependency on coreutils for initrd macros (boo#958562)
    * Call missing initrd macro at postun (boo#958562)
    * Fri Aug 21 10:50:21 UTC 2015 - opensuse.lietuviu.kalba@gmail.com
    * Rename conflicting legacy keymaps:
    * dvorak/no.map -> dvorak/no-dvorak.map
    * fgGIod/trf.map -> fgGIod/trf-fgGIod.map
    * olpc/pt.map -> olpc/pt-olpc.map
    * qwerty/cz.map -> qwerty/cz-qwerty.map
    * i386/qwerty/sr-latin links to sr-cy
    * add compose rules to cz layout (rh#1181581)
    * Mon Aug 10 11:53:48 UTC 2015 - sndirsch@suse.com
    * genmap4systemd.sh: use 'abnt2' model for 'br' layouts, 'jp106'
      model for 'jp' layouts and 'microsoftpro' for anything else
      (instead of 'pc105' before) (FATE#318426)
    * Tue Jul 21 10:05:35 UTC 2015 - sndirsch@suse.com
    * added genmap4systemd.sh tool, which generates entries for
      systemd's /usr/share/systemd/kbd-model-map table from
      xkeyboard-config converted keymaps; entries are written to
      /usr/share/systemd/kbd-model-map.xkb-generated, so these can
      easily be added to /usr/share/systemd/kbd-model-map by systemd
      package (FATE#318426)
    * Fri Jul 17 12:54:27 UTC 2015 - sndirsch@suse.com
    * Include xkb layouts from xkeyboard-config converted to console
      keymaps, (FATE#318426)
    * Rename Finnish xkb converted layout
    * Add xkb and legacy keymaps subdirs to loadkyes search path
      (kbd-1.15.5-loadkeys-search-path.patch), remove symlinks,
      Don't convert layouts that can't input ASCII,
    * Original keymaps moved to legacy dir, created symlinks to xkb
      keymaps
    * Thu Apr  2 18:36:23 UTC 2015 - crrodriguez@opensuse.org
    * For the previos change to wok, we need to buildrequire
      suse-module-tools to get the initrd rpm macros.
    * Sat Mar 28 21:15:08 UTC 2015 - crrodriguez@opensuse.org
    * Regenerate the initrd if this package changes as it is
      included there for early console setup.
    * Tue Feb 10 15:45:09 UTC 2015 - tchvatal@suse.com
    * Convert changelog to utf8
    * Sat Nov 29 22:14:00 UTC 2014 - Led <ledest@gmail.com>
    * fix bashisms in scripts
    * add patches:
    * kbd-2.0.2-fix-bashisms.patch
    * update patches:
    * kbd-1.15.2-unicode_scripts.patch
    * Thu Sep 25 10:33:55 UTC 2014 - pgajdos@suse.com
    * euro{,1,2}.map now produces correct unicode for Euro sign
      [bnc#360993]
    * added patches:
    * kbd-2.0.2-euro-unicode.patch
    * Thu Sep 18 10:54:51 UTC 2014 - pgajdos@suse.com
    * port dumpkeys-C-opt.patch
    * modified patches:
    * kbd-1.15.2-dumpkeys-C-opt.patch
    * Fri Sep 12 09:52:30 UTC 2014 - pgajdos@suse.com
    * kbd-2.0.2-doshell-reference.patch:
      drop doshell reference from openvt.1 man page [bnc#675317]
    * Thu Sep  4 17:51:54 UTC 2014 - jw@owncloud.com
    * added /usr/bin/kbd, a simple userfriedly keymap switcher.
      From https://github.com/jnweiger/kbd-wrapper
    * Fri Aug 22 09:50:15 UTC 2014 - pgajdos@suse.com
    * drop kbd-1.15.2-chvt-userwait.patch [bnc#830805] (internal)
      (--userwait seems to not be used anywhere)
    * Fri Aug 22 09:25:51 UTC 2014 - pgajdos@suse.com
    * remove testutf8 stub (2009: testutf8 will be soon removed completely,
      it's kept only not to break /etc/profile currently)
    * Fri Aug 22 06:51:23 UTC 2014 - pgajdos@suse.com
    * Update to version 2.0.2:
      libkeymap: fix kmap on big-endian machines
      Add functions to get the total number of elements
      Add functions to convert ksyms
      eurlatgr - new Linux console font
      Hide syms array
      Add information about the total number of elements
      Add function to obtain items from the diacritical table
      Change the API for working with the diacritical table
      Change API for working with list of functions
      Add functions to check diacr/func existance
      Add pancyrillic font
      po: Update translations (from translationproject.org)
      vlock: implement PAM account and password management
      vlock: rename ERROR_TIMEOUT macro to LONG_DELAY
      vlock: introduce short delays after non-fatal PAM errors
      Added Latvian keymap
      (changelog taken from
      http://lists.altlinux.org/pipermail/kbd/2014-July/000476.html)
    * add kbd-2.0.2-comment-typo-qwerty.patch [bnc#825385]
    * Thu Jul 24 20:31:47 UTC 2014 - dimstar@opensuse.org
    * No longer recommend fbset: the package does no longer exist in
      openSUSE since late 2013.
    * Sun Nov  3 17:51:09 UTC 2013 - dap.darkness@gmail.com
    * Update to version 2.0.1:
    * Disable arch-specific tests.
    * Fix regression in processing alt_is_meta keyword.
    * Rename Bepo keymaps:
      dvorak-fr-bepo.map -> fr-bepo-latin9.map
      dvorak-fr-bepo-utf8.map -> fr-bepo.map.
    * Deleted kbd-1.15.2-dumpkeys-ppc.patch as obsolete:
      http://lists.opensuse.org/opensuse-factory/2013-08/msg00347.html
    * gcc 4.6+ became required to prevent compilling error:
      "expected declaration specifiers or '...' before 'va_list'".
    * Mon Aug 19 18:27:19 UTC 2013 - dap.darkness@gmail.com
    * Update to version 2.0.0:
    * Add bepo keyboard layout;
    * Add libkeymap;
    * The loadkeys and dumpkeys always use the libkeymap.
    * Updated patches because of docs moved:
    * kbd-1.15.2-chvt-userwait.patch
    * kbd-1.15.2-docu-X11R6-xorg.patch
    * Disabled patches because of dumpkeys rewritten:
    * kbd-1.15.2-dumpkeys-C-opt.patch
    * kbd-1.15.2-dumpkeys-ppc.patch


author: mhocko@suse.com
changelog:
  - mremap: properly flush TLB before releasing the page
    (bnc#1113769, CVE-2018-18281).
  - commit 75ac082


author: bp@suse.de
changelog:
  - EDAC, thunderx: Fix memory leak in thunderx_l2c_threaded_isr()
    (bsc#1114648).
  - resource: Include resource end in walk_*() interfaces
    (bsc#1114648).
  - x86/kexec: Correct KEXEC_BACKUP_SRC_END off-by-one error
    (bsc#1114648).
  - commit 075a142


author: tzimmermann@suse.de
changelog:
  - blacklist.conf: Append 'drm/i915/overlay: Allocate physical registers from stolen'
  - commit 18223a8


author: tzimmermann@suse.de
changelog:
  - blacklist.conf: Append 'drm/i915/gen9+: Fix initial readout for Y tiled framebuffers'
  - commit fa696cf


author: lduncan@suse.com
changelog:
  - scsi: libsas: fix a race condition when smp task timeout
    (CVE-2018-20836 bsc#1134395).
  - commit 29c72b8


author: mhocko@suse.com
changelog:
  - Update patches.suse/do-not-default-to-ibrs-on-skl.patch
    (bsc#1068032 CVE-2017-5753 bsc#1112824 jsc#SLE-7074).
  - commit e209c50


author: tbogendoerfer@suse.de
changelog:
  - tun: allow positive return values on dev_get_valid_name() call
    (bsc#1135603 CVE-2018-7191).
  - tun: call dev_get_valid_name() before register_netdevice()
    (bsc#1135603 CVE-2018-7191).
  - commit c14bc34


author: mkubecek@suse.cz
changelog:
  - Update "TCP SACK Panic" series
  - Update upstream references (add CVE-2019-11477 bsc#1137586):
    patches.fixes/tcp-limit-payload-size-of-sacked-skbs.patch
    patches.fixes/tcp-tcp_fragment-should-apply-sane-memory-limits.patch
    patches.fixes/tcp-add-tcp_min_snd_mss-sysctl.patch
    patches.fixes/tcp-enforce-tcp_min_snd_mss-in-tcp_mtu_probing.patch
  - Merge patches.fixes/tcp-fix-fack_count-accounting-on-tcp_shift_skb_data.patch
    into patches.fixes/tcp-limit-payload-size-of-sacked-skbs.patch
    to match what stable-4.4 has.
  - commit 1da6a82


author: mkubecek@suse.cz
changelog:
  - tcp: refine memory limit test in tcp_fragment() (CVE-2019-11478
    bsc#1137586 bsc#1139751).
  - Refresh
    patches.kabi/kabi-drop-LINUX_MIB_TCPWQUEUETOOBIG-snmp-counter.patch.
  - commit a0d7e38


author: tbogendoerfer@suse.de
changelog:
  - Fix ixgbe backport (bsc#1133140)
  - Refresh
    patches.drivers/ixgbe-Break-out-Rx-buffer-page-management.patch.
  - Refresh
    patches.drivers/ixgbe-Update-driver-to-make-use-of-DMA-attributes-in.patch.
  - commit c4ef1b9


author: mhocko@suse.com
changelog:
  - Update
    patches.fixes/0001-mwifiex-Fix-heap-overflow-in-mwifiex_uap_parse_tail_.patch
    (bsc#1136935, CVE-2019-10126).
  - commit 408da56


author: mkubecek@suse.cz
changelog:
  - kabi: handle addition of netns_ipv4::ip_id_key (CVE-2019-10638
    bsc#1140575).
  - kabi: handle addition of net::hash_mix (CVE-2019-10639
    bsc#1140577).
  - inet: switch IP ID generator to siphash (CVE-2019-10638
    bsc#1140575).
  - netns: provide pure entropy for net_hash_mix() (CVE-2019-10639
    bsc#1140577).
  - netns: get more entropy from net_hash_mix() (CVE-2019-10638
    bsc#1140575).
  - siphash: add cryptographically secure PRF (CVE-2019-10638
    bsc#1140575).
  - commit 8291104


author: mmarek@suse.cz
changelog:
  - testsutie: Uncompress most modules (updated test-files.tar.xz)
  - testsuite: Do not run tests with *.ko.gz if zlib is not enabled
  - Disable compression support, as other tools do not support it
    (e.g. module signing)


author: mmarek@suse.cz
changelog:
  - Updated to kmod 17
    * Do not require xsltproc for build
    * Parse softdeps stored in kernel modules
    * Add experimental python bindings (not enabled in the package yet)
    * Misc bugfixes
  - Deleted patches that went upstream. Only the unsupported modules
    feature remains:
    0002-modprobe-Recognize-allow-unsupported-modules-on-comm.patch
    0003-libkmod-config-Recognize-allow_unsupported_modules-i.patch
    0009-libkmod-Implement-filtering-of-unsupported-modules-o.patch
    0010-modprobe-Implement-allow-unsupported-modules.patch
    0001-Do-not-filter-unsupported-modules-when-running-a-van.patch


author: dvaleev@suse.com
changelog:
  - Fix kernel master build for ppc64le (bsc#1070209)
    depmod-Ignore_PowerPC64_ABIv2_.TOC.symbol.patch


author: mmarek@suse.cz
changelog:
  - libkmod: Handle long lines in /proc/modules (bsc#983754)
    0001-libkmod-Handle-long-lines-in-proc-modules.patch


author: martin.wilck@suse.com
changelog:
  - Fix race while loading modules (bsc#998906)
    * Add 0001-Fix-race-while-loading-modules.patch (upstream fd44a98)


author: msuchanek@suse.com
changelog:
  - Fix resolving .TOC. in modules on 4.4 and older kernel (bsc#1070209)
    depmod-Don-t-add-.TOC.-when-it-s-in-the-kernel.patch


author: msuchanek@suse.de
changelog:
  - Fix module dependency file corruption on parallel invocation (bsc#1118629).
    depmod-Prevent-module-dependency-files-corruption-du.patch
    depmod-Prevent-module-dependency-files-missing-durin.patch


author: msuchanek@suse.de
changelog:
  - Fix warming in libkmod.h (boo#1097869).
    kmod-build-cure-compiler-warnings-showing-up-externa.patch
  - Prevent potential buffer overflow in libkmod (bsc#1118629).
    depmod-shut-up-gcc-insufficinet-buffer-warning.patch


author: vcizek@suse.com
changelog:
  - Fix infinite loop in DSA generation with incorrect parameters
    (bsc#1112209)
    * add 0001-DSA-Check-for-sanity-of-input-parameters.patch


author: vcizek@suse.com
changelog:
  - OpenSSL Security Advisory [30 October 2018]
    * Timing vulnerability in DSA signature generation
      (bsc#1113652, CVE-2018-0734)
    * And more timing fixes (bsc#1113742)
  - Add patches:
    * openssl-CVE-2018-0734.patch
    * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
    * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch
    * 0001-DSA-Address-a-timing-side-channel-whereby-it-is-possible.patch
    * 0002-ECDSA-Address-a-timing-side-channel-whereby-it-is-possible.patch


author: vcizek@suse.com
changelog:
  - Elliptic curve scalar multiplication timing attack defenses
    * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
  - Add openssl-CVE-2018-5407-PortSmash.patch


author: pmonrealgonzalez@suse.com
changelog:
  - Set TLS version to 0 in msg_callback for record messages to avoid
    confusing applications (bsc#1100078)
    * add openssl-record_msg_callback.patch


author: pmonrealgonzalez@suse.com
changelog:
  - The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
    Implementations (bsc#1117951)
    * https://github.com/openssl/openssl/issues/7739
  - add patches
    * openssl-add-computationally-constant-time-bn_bn2binpad.patch
    * openssl-address-Coverity-nit-in-bn2binpad.patch
    * openssl-switch-to-BN_bn2binpad.patch
    * 0001-crypto-bn-add-more-fixed-top-routines.patch
    * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
    * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
    * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
    * 0005-err-err.c-add-err_clear_last_constant_time.patch
    * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
    * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
    * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
    * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch
  - Added required patches with backported functions bn_mul_mont_fixed_top
    and bn_mod_add_fixed_top:
    * openssl-bn_mul_mont_fixed_top.patch
    * openssl-bn_mod_add_fixed_top.patch


author: pmonrealgonzalez@suse.com
changelog:
  - Fix 0-byte record padding oracle via SSL_shutdown
    (bsc#1127080, CVE-2019-1559)
    * add openssl-CVE-2019-1559.patch


author: pmonrealgonzalez@suse.com
changelog:
  - Fix IV handling in SHAEXT paths: aes/asm/aesni-sha*-x86_64.pl
    * Added openssl-1.0.2l-aes-IV-in_SHAEXT.patch [bsc#1113975]


author: vcizek@suse.com
changelog:
  - Reject invalid EC point coordinates (bsc#1131291)
    * add 0001-RT-4242-reject-invalid-EC-point-coordinates.patch


author: mmarek@suse.cz
changelog:
  - Update to kernel headers 3.12.
  - Drop the never-upstreamed SO_BSDCOMPAT patch. The kernel does
    issue a warning when a process uses this socket option.


author: mmarek@suse.cz
changelog:
  - 0001-packet-fill-the-gap-of-TPACKET_ALIGNMENT-with-zeros.patch:
    packet: fill the gap of TPACKET_ALIGNMENT with zeros (bnc#874131)
  - 0002-packet-deliver-VLAN-TPID-to-userspace.patch
    packet: deliver VLAN TPID to userspace (bnc#874131)


author: mmarek@suse.cz
changelog:
  - Update to kernel headers 4.4 (fate#320305).
  - Remove pre-4.4 backports:
    0001-packet-fill-the-gap-of-TPACKET_ALIGNMENT-with-zeros.patch
    0001-powerpc-Include-the-appropriate-endianness-header.patch
    0001-s390-kernel-add-system-calls-for-PCI-memory-access.patch
    0002-packet-deliver-VLAN-TPID-to-userspace.patch


author: mmarek@suse.cz
changelog:
  - Sync <rdma/hfi/hfi1_user.h> with the SLE12-SP2 kernel
    (bsc#973818, fate#319242, bsc#981074).
    Added following patches:
    staging-hfi1-enable-tid-caching-feature.patch
    staging-rdma-hfi1-adjust-eprom-partitions-add-eprom-.patch
    staging-rdma-hfi1-clean-up-macro-indentation.patch
    uapi-hfi1_user-add-command-and-event-for-tid-caching.patch
    uapi-hfi1_user-correct-comment-for-capability-bit.patch


author: mmarek@suse.cz
changelog:
  - Backport ND_CMD_CALL ioctl to <linux/ndctl.h> (FATE#319858, bsc#986519)
    0001-nfit-libnvdimm-limited-whitelisted-dimm-command-mars.patch


author: mmarek@suse.com
changelog:
  - Sync <rdma/hfi/hfi1_user.h> with the SLE12-SP3 kernel (bsc#1040698)
    Added / renamed patches:
    staging-rdma-hfi1-clean-up-macro-indentation.patch
    - > 0001-staging-rdma-hfi1-Clean-up-macro-indentation.patch
    staging-rdma-hfi1-adjust-eprom-partitions-add-eprom-.patch
    - > 0002-staging-rdma-hfi1-Adjust-EPROM-partitions-add-EPROM-.patch
    uapi-hfi1_user-correct-comment-for-capability-bit.patch
    - > 0003-uapi-hfi1_user-Correct-comment-for-capability-bit.patch
    uapi-hfi1_user-add-command-and-event-for-tid-caching.patch
    - > 0004-uapi-hfi1_user-Add-command-and-event-for-TID-caching.patch
    staging-hfi1-enable-tid-caching-feature.patch
    - > 0005-staging-hfi1-Enable-TID-caching-feature.patch
    0006-IB-hfi1-Remove-multiple-device-cdev.patch
    0007-IB-hfi1-Remove-EPROM-functionality-from-data-device.patch
    0008-IB-hfi1-Remove-unused-user-command.patch
    0009-IB-hfi1-Add-ioctl-interface-for-user-commands.patch
    0010-IB-hfi1-Remove-write-use-ioctl-for-user-cmds.patch
    0011-IB-hfi1-Allow-for-non-double-word-multiple-message-s.patch
    0012-IB-hfi1-Disable-header-suppression-for-short-packets.patch
    0013-RDMA-core-Commonize-RDMA-IOCTL-declarations-location.patch
    0014-RDMA-core-Move-legacy-MAD-IOCTL-declarations-to-comm.patch
    0015-RDMA-hfi1-Avoid-redeclaration-error.patch
    0016-RDMA-core-Move-HFI1-IOCTL-declarations-to-common-fil.patch
    0017-RDMA-core-Rename-RDMA-magic-number.patch
    0018-RDMA-core-Unify-style-of-IOCTL-commands.patch


author: msuchanek@suse.com
changelog:
  - elf: Add powerpc specific core note sections (fate#318470, bsc#1103375)
    0020-elf-Add-powerpc-specific-core-note-sections.patch


author: werner@suse.de
changelog:
  - Add patch ncurses-5.9-ibm327x.dif to make ibm327x not a generic
    terminal type but a more dumb one (bnc#859214)


author: werner@suse.de
changelog:
  - Add ncurses patch 20140201
    + add/use symbol NCURSES_PAIRS_T like NCURSES_COLOR_T, to illustrate
      which "short" types are for color pairs and which are color values.
    + fix build for s390x, by correcting field bit offsets in generated
      representation clauses when int=32 long=64 and endian=big, or at
      least on s390x (patch by Nicolas Boulenguez).
    + minor cleanup change to test/form_driver_w.c (patch by Gaute Hope).
  - Add ncurses patch 20140125
    + remove unnecessary ifdef's in Ada95/gen/gen.c, which reportedly do
      not work as is with gcc 4.8 due to fixes using chtype cast made for
      new compiler warnings by gcc 4.8 in 20130824 (Debian #735753, patch
      by Nicolas Boulenguez).


author: werner@suse.de
changelog:
  - Drop patch ncurses-5.9-environment.dif as YaST2 ncurses GUI does
    not need it anymore and as well as it causes bug bsc#1000662


author: werner@suse.de
changelog:
  - Add patch ncurses-5.9-bsc1046853_1046858.dif which is a backport
    from patch 20170701 for ncurses 6.0 to fix CVE-2017-10684 and
    CVE-2017-10685 (bsc#1046853, bsc#1046858)


author: werner@suse.de
changelog:
  - Modify patch ncurses-5.9-bsc1046853_1046858.dif to add the last
    change from patch 20170708 for ncurses 6.0 to fix CVE-2017-10684
    and CVE-2017-10685 on 32bit (bsc#1046853, bsc#1046858)
  - This also fixes CVE-2017-11112 and CVE-2017-11113 (bsc#1047964,
    bsc#1047965)


author: werner@suse.de
changelog:
  - Modify patch ncurses-5.9-bsc1046853_1046858.dif to avoid broken
    termcap format caused by the backport of change 20170701  (boo#1049344)


author: werner@suse.de
changelog:
  - Add patch ncurses-5.9-bsc10561xxx.patch
    Backport fixes for bugs bsc#1056126 (CVE-2017-13734) bsc#1056127
    (CVE-2017-13733), bsc#1056128 (CVE-2017-13732), bsc#1056129
    (CVE-2017-13731), bsc#1056131 (CVE-2017-13730), bsc#1056132
    (CVE-2017-13729), and bsc#1056136 (CVE-2017-13728)
    from ncurses-6.0-20170826


author: werner@suse.de
changelog:
  - Modify patch ncurses-5.9-bsc10561xxx.patch
    to include backport of ncurses-6.0-20170902.patch as well (bsc#1056127)


author: werner@suse.de
changelog:
  - Add patch ncurses-5.9-bsc1115929.patch
    * For bug bsc#1115929 port back null pointer checks to catch e.g.
      the crash in _nc_parse_entry(), belongs to CVE-2018-19211


author: werner@suse.de
changelog:
  - Modify patch ncurses-5.9-bsc1115929.patch as the change in
    form_driver() breaks ncurses-5.9 and the variable move_after_insert
    of ncurses-6.1 is not known in 5.9 (bsc#1121450)


author: mchang@suse.com
changelog:
  - merge gh#openSUSE/perl-bootloader#112
  - implemented trusted boot/TPM support in UEFI mode (bsc#1036735,
    fate#315831)
  - 0.918


author: wfeldt@opensuse.org
changelog:
  - merge gh#openSUSE/perl-bootloader#116
  - add --get-option to pbl (bsc#1033776, bsc#1050349)
  - 0.921


author: wfeldt@opensuse.org
changelog:
  - merge gh#openSUSE/perl-bootloader#117
  - work without /etc/default/grub_installdevice (bsc#1079321,
    bsc#994322)
  - removed unused function


author: coolo@novell.com
changelog:
  - Readd pkg-config-dnl.patch, see
    http://lists.gnu.org/archive/html/autoconf/2010-07/msg00035.html


author: dimstar@opensuse.org
changelog:
  - Update to version 0.27:
    + Drop usage of popt for equivalent API in glib2
    + Add back an internal snapshot of glib2 to break circular
      dependency
    + Fix --exists to check for Requires and Requires.private.
    + Various fixes for MinGW which should allow it to be used
      unpatched on that system
    + New autoconf macros PKG_INSTALLDIR and PKG_NOARCH_INSTALLDIR to
      help determine the .pc file install directory
    + Fix handling of --exact/atleast/max-version vs. =/>=/<=
    + Fix errors in man page source
    + Ensure testing only searches in the check directory
    + Bump glib requirement to 2.16 to avoid deprecated
      g_win32_get_package_installation_subdirectory()
    + Autotools refresh and update
    + Use g_alloca from glib instead of figuring out alloca ourselves
    + Remove search for setresuid & setreuid only needed for internal
      popt
    + Bugs fixed: fdo#833, fdo#2458, fdo#5214, fdo#5326, fdo#5703,
      fdo#6074, fdo#8653, fdo#9135, fdo#9143, fdo#9584, fdo#10652,
      fdo#11464, fdo#14396, fdo#17053, fdo#23922, fdo#28776,
      fdo#29011, fdo#29801, fdo#31699, fdo#31700, fdo#32622,
      fdo#34382, fdo#37266, fdo#39646, fdo#41081, fdo#43149,
      fdo#44843, fdo#45599, fdo#45742, fdo#48743
  - Changes from version 0.26:
    + Build system fixes
    + More tests
    + pkg.m4 fixups which makes autoconf 2.66 happier.
    + Drop support for legacy -config scripts.  Those should already
      be gone and cause problems in cross-compilation environments.
    + Drop embedded glib
    + Fix up pkg.m4 to handle the case of --exists working and
    - -cflags or --libs failing.
    + Various documentation updates
    + Allow $() through without escaping it.
    + Add --with-system-include-path instead of hard-coding
      /usr/include.
  - Pass --with-internal-glib to configure. We don't want to have a
    build cycle with glib, so we use the interal version.
  - Clean up spec-file using spec-cleaner and manually.
  - Drop pkg-config-dnl.patch: fixed upstream.


author: dimstar@opensuse.org
changelog:
  - Update to version 0.27.1:
    + Various fixes for using the internal glib snapshot. It should
      now be usable pretty much everywhere with the exception that
      universal builds are not supported on OS X.
    + Remove usage of gettext from the internal glib to avoid gettext
      and libintl dependencies
    + Update internal glib snapshot to 2.32.4
    + Fix check for POSIX shell used in tests to work better
    + Handle spaces in autodetected prefix on Windows
    + Bugs fixed: fdo#3550, fdo#51883, fdo#52031, fdo#53493.


author: p.drouand@gmail.com
changelog:
  - Update to version 0.28:
    + Fixed a pair of long-standing and intertwined bugs involving
      unwanted removal of flags:
    - Other Libs flags like -Wl are now kept in context order
      with -l flags.
    - Aggressive removal of all duplicate arguments has been scaled
      back so that just consecutive duplicate arguments are
      removed. One result of this change is that some flags could
      be repeated in the final output, especially flags from
      non-pkg-config packages like -lm. Since pkg-config rarely has
      enough knowledge here about the right thing to do, we throw
      the duplicate arguments at the compiler/linker and trust it
      will do the right thing.
    + Fixed an old bug to allow circular Requires. This fix brings
      along a small behavior change in that pkg-config resolves
      requires depth first, causing some lower level flags to show up
      earlier in the output than previously.
    + Cleaned up many corner-case bugs and ambiguous behavior in
      pkg-config's interface.
    + New autoconf macro PKG_CHECK_VAR for reading variables from .pc
      files.
    + Default to suppressing -L/lib and/or -L/lib64 like their /usr
      counterparts.
    + To help support multiarch scenarios out of the box,
      $host-pkg-config is now installed unless --disable-host-tool
      is passed to configure.
    + Added optional gcov usage through the --with-gcov configure
      option. As a result, many more tests were added to greatly
      increase the coverage of the code to 86% of executed lines on a
      Fedora 18 machine.
    + Bugs fixed: fdo#130, fdo#7331, fdo#16101, fdo#17053, fdo#19950,
      fdo#34504, fdo#48098, fdo#54231, fdo#54271, fdo#54379,
      fdo#54384, fdo#54386, fdo#54388, fdo#54389, fdo#54390,
      fdo#54391, fdo#54427, fdo#54463, fdo#54716, fdo#57078,
      fdo#58363, fdo#59435.


author: dvaleev@suse.com
changelog:
  - Don't redefine _arch, but use file pattern instead. This ensures
    we don't have to run fixing each and every arch.


author: fbui@suse.com
changelog:
  - drop 0001-journald-do-not-store-the-iovec-entry-for-process-co.patch
  - drop 0002-journald-set-a-limit-on-the-number-of-fields-1k.patch
  - drop 0003-journal-remote-verify-entry-length-from-header.patch
  - drop 0004-journal-remote-set-a-limit-on-the-number-of-fields-i.patch
    All these patches have been imported in branch "SUSE/v228"


author: fbui@suse.com
changelog:
  - Import commit 44bd6f58bd72e7d5e5fa84b06b6791843d38642a
    1d2f3b1a7e journal-remote: set a limit on the number of fields in a message
    21f88e81ca journal-remote: verify entry length from header
    6e7fe244ce journald: set a limit on the number of fields (1k)
    f3d8e95e8f journald: do not store the iovec entry for process commandline on stack


author: fbui@suse.com
changelog:
  - Import commit 7affa96346d71ccda4f9b1a3c8daa51dbb55698b
    de4df4ac7a sd-bus: if we receive an invalid dbus message, ignore and proceeed
    c83a5c3202 automount: don't pass non-blocking pipe to kernel.
    5da99a8192 units: make sure initrd-cleanup.service terminates before switching to rootfs (bsc#1123333)
    6c01133180 units: add Wants=initrd-cleanup.service to initrd-switch-root.target (#4345) (bsc#1123333)


author: fbui@suse.com
changelog:
  - Drop 0001-systemd-PID1-crash-with-specially-crafted-D-Bus-mess.patch
    Its upstream counterparts have been backported to SUSE/v228.


author: msuchanek@suse.de
changelog:
  - Do not automagically online memory on s390x (bsc#1127557)
    On s390 memory that is not online is typically 'reserve' memory that
    should be only activated by the system administrator.
    There is no way to detect reserve memory from information provided by
    the kernel so the state of the art is to not activate memory
    automagically if the platform is s390.


author: fbui@suse.com
changelog:
  - Drop "BuildRequires:  -post-build-checks" from the specfile (bsc#1130230)
    The syntax of this directive is obsolete and should be replaced by
    "#!BuildIgnore: post-build-checks".
    However there's no reasons to disable these SUSE extra checks
    especially since the package still builds fine with them turned
    ON.
    So simply drop the line from the spec file.


author: fbui@suse.com
changelog:
  - Import commit 272393ca94ebb079147009baa39581252ffce41e
    6a4e2b647c udevd: notify when max number value of children is reached only once per batch of events (bsc#1132400)
    b8411a4684 sd-bus: bump message queue size again (bsc#1132721)
    8dc9fe32d4 tmpfiles: split tmp.conf out
    200562758b pam-systemd: use secure_getenv() rather than getenv() (bsc#1132348 CVE-2019-3842)
    283a67916f sparse: avoid clash with __bitwise and __force from 4.10 linux/types.h (#5061)
    fc332d83ad core: only watch processes when it's really necessary (bsc#955942 bsc#1128657)
    4d1c23863d bus: fix memleak on invalid message
    073306e529 rules: load drivers only on "add" events (bsc#1126056)
    70c6f37ef9 Allocate temporary strings to hold dbus paths on the heap (bsc#1125352 CVE-2019-6454)
    e057b4bf85 Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (bsc#1125352 CVE-2019-6454)
    5d79cb0d6d sysctl: Don't pass null directive argument to '%s' (bsc#1121563)


author: fbui@suse.com
changelog:
  - Import commit f35c6dc530aa46d1ed68cc9d191c790474049f8e
    636ea5c852 Merge branch 'CVE-2018-6954' into SUSE/v228 (bsc#1080919 CVE-2018-6954)


author: fbui@suse.com
changelog:
  - systemd-coredump: generate a stack trace of all core dumps (jsc#SLE-5933)
    Stack traces are logged into the journal.


author: fbui@suse.com
changelog:
  - Do not explicitly require systemd package. This package is already
    required by systemd and must be installed before it.
    systemctl is only needed in %posttrans which should be available at
    this step.
    However the whole preset rpm macro thing looks really strange and
    quite ugly. This should be revisited.


author: trenn@suse.de
changelog:
  - Do not start mcelog service based on an udev (/dev/mcelog) rule
    (bsc#976781), but enable it automatically at install time.


author: ohering@suse.de
changelog:
  - enable xencommons (bnc#897352, bnc#1012842)
    xendomains must be enabled manually by the local admin (bnc#937371)


author: fbui@suse.com
changelog:
  - Enable by default uuidd shipped by util-linux (bsc#1012850)
    util-linux was previously shipping a preset file enabling uuidd by
    default. This is now done here as other packages are not supposed to
    ship their own preset rules.
    Also increase the package version so util-linux can conflict with
    the previous versions and hence will be updated *after* the new
    version of the presets package is. This is important otherwise if
    util-linux removed its preset file first, then the presets package
    would believe a new change in the presets and you enable again
    uuidd.


author: sbrabec@suse.com
changelog:
  - Bump version to 12.2 to make version numbers consistent between
    SLE and Leap (boo#1029775).
  - Remove superfluous uuidd.service. uuidd.socket is sufficient
    (bsc#1012850#c8).


author: sschricker@suse.com
changelog:
  - enable nvmefc-boot-connections.service to discover
    network-provided nvme drives on boot (bsc#1128428)


author: idonmez@suse.com
changelog:
  - Update to version 1.2.8
    * Add new inflateGetDictionary() function
    * Fix bug where gzopen() immediately followed by gzclose()
      would write an empty file instead of an empty gzip stream.
    * Fix bug in gzclose() when gzwrite() runs out of memory


author: tchvatal@suse.com
changelog:
  - Remove zlib-devel-static, nothing should use libz.a anyway.
  - Package minizip library, everything using it should now pull
    minizip-devel and unbundle it bnc#935864


author: tchvatal@suse.com
changelog:
  - Include fixes for bnc#1003580 bnc#1003579 bnc#1003577 bnc#1013882:
    * zlib-bnc1003577.patch
    * zlib-bnc1003579-part2.patch
    * zlib-bnc1003579.patch
    * zlib-bnc1003580.patch refreshed
    * zlib-bnc1013882.patch CVE-2016-9843


author: tchvatal@suse.com
changelog:
  - Add patch to safeguard against negative values in uInt bsc#1071321:
    * 0001-Do-not-try-to-store-negative-values-in-unsigned-int.patch


