# changelog

author: werner@suse.de
changelog:
  - Add patch git-33-04c9daea971d58248c64076d41315129a7083629.patch
    * In bash.bashrc move ssh/sudo source of profile to avoid removing
      the `is' variable before last use (boo#1088524)
    * Avoid the shell code checker stumble over `function' keys
      word in ls.bash (git#54).


author: werner@suse.de
changelog:
  - Add patch git-35-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
    No error at login if java system directory is empty (bsc#1102310)


author: ro@suse.de
changelog:
  -  Add patch git-34-011e1546bd1092c2a8c9754866ca02439ed23d54.patch
    * Get mixed use case of service wrapper script straight
      (bsc#1040613)


author: ro@suse.de
changelog:
  - add patch git-36-7a00987c0df059cc1495cba7d70d319593d4cfed.patch
    test for xdgdir/applications before adding data dir (bsc#1095969)


author: ro@suse.de
changelog:
  - Add patch git-39-00d332a443062395957f422c89eaed9d0979ec00.patch
    * update logic for JRE_HOME env variable (bsc#1128246)


author: ro@suse.de
changelog:
  - Add patch git-40-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
    * Restore old position of ssh/sudo source of profile
      for bug bsc#1118364 but hopefully do not reintroduce
      bug boo#1088524


author: sandonov@suse.com
changelog:
  - Revert "Avoid NAT on Bridges. Bridges are L2 devices, really."
    (bsc#1115020). Based on github.com/openSUSE/aaa_base/pull/35
    * 0001-Revert-Avoid-NAT-on-Bridges-Bridges-are-L2-devices-really-bsc-1115020.patch


author: ro@suse.de
changelog:
  - add patch git-36-4b7d6b6e126d96e48757783e9fc59ac477ba6a44.patch
    xdg-environment: reduce list in /opt/* to gnome,kde4,kde3
    (bnc#910904) (bsc#1149127)
  - rename patch
    git-36-7a00987c0df059cc1495cba7d70d319593d4cfed.patch to
    git-37-7a00987c0df059cc1495cba7d70d319593d4cfed.patch


author: werner@suse.de
changelog:
  - Add patch git-38-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
    Use official key binding functions in inputrc
    that is replace up-history with previous-history, down-history with
    next-history and backward-delete-word with backward-kill-word
    (bsc#1084934).


author: ro@suse.de
changelog:
  - add patch git-41-0da43d3808a0529003524d762118ff46a628e0b0.patch
    * generalize testing for JVMs when creating the java path
      to support sapjvm and others (boo#1157794)


author: sweet_f_a@gmx.de
changelog:
  - update to upstream alpha 1.06.95 (2006-09-05), in use in other
    major distros for quite a long time (Debian, Fedora, Ubuntu, ...)
  - add patches from Fedora
  - automake dependency removed


author: fstrba@suse.com
changelog:
  - Update to 1.8.22:
    * Security fixes:
      + Do not treat ActivationFailure message received from
      root-owned systemd name as a format string. In principle this
      is a security vulnerability, but we do not believe it is
      exploitable in practice, because only privileged processes can
      own the org.freedesktop.systemd1 bus name, and systemd does
      not appear to send activation failures that contain "%".
      Please note that this probably *was* exploitable in dbus
      versions older than 1.6.30, 1.8.16 and 1.9.10 due to a missing
      check which at the time was only thought to be a denial of
      service vulnerability (CVE-2015-0245). If you are still
      running one of those versions, patch or upgrade immediately.
      (fdo#98157, bsc#1003898, Simon McVittie)
    * Security hardening:
      + On Unix platforms, change the default configuration for the
      session bus to only allow EXTERNAL authentication (secure
      kernel-mediated credentials-passing), as was already done for
      the system bus.
      This avoids falling back to DBUS_COOKIE_SHA1, which relies on
      strongly unpredictable pseudo-random numbers; under certain
      circumstances (/dev/urandom unreadable or malloc() returns
      NULL), dbus could fall back to using rand(), which does not
      have the desired unpredictability. The fallback to rand() has
      not been changed in this stable-branch since the necessary
      code changes for correct error-handling are rather intrusive.
      If you are using D-Bus over the (unencrypted!) tcp: or
      nonce-tcp: transport, in conjunction with DBUS_COOKIE_SHA1 and
      a shared home directory using NFS or similar, you will need to
      reconfigure the session bus to accept DBUS_COOKIE_SHA1 by
      commenting out the <auth> element. This configuration is not
      recommended.
    * Other fixes:
      + Fix a memory leak when GetConnectionCredentials() succeeds
      (fdo#91008, Jacek Bukarewicz)
      + Ensure that dbus-monitor does not reply to messages intended
      for others (fdo#90952, Simon McVittie)
      + Add locking to DBusCounter's reference count and notify
      function (fdo#89297, Adrian Szyndela)
      + Ensure that DBusTransport's reference count is protected by
      the corresponding DBusConnection's lock (fdo#90312, Adrian
      Szyndela)
      + On Windows, listen on the same port for IPv4 and IPv6
      (previously broken by an endianness mistake), and fix a
      failure to bind TCP sockets on approximately 1 attempt in 256
      (fdo#87999, Ralf Habacker)
      + Correctly release DBusServer mutex before early-return if we
      run out of memory while copying authentication mechanisms
      (fdo#90021,  Ralf Habacker)
      + Correctly initialize all fields of DBusTypeReader (fdo#90021;
      Ralf Habacker, Simon McVittie)
      + Fix some missing \n in verbose (debug log) messages
      (fdo#90004, Ralf Habacker)
      + Clean up some memory leaks in test code (fdo#90021, Ralf
      Habacker)


author: kukuk@suse.de
changelog:
  - Create new subpackage: dbus-1-nox11
    - contains dbus-launch without x11 support
  - Rename dbus-launch to dbus-launch.x11
  - use update-alternatives to switch between dbus-launch with and
    without X11
  - Solves [bnc#934214]
  - Move dbus-run-session to dbus-1


author: sflees@suse.de
changelog:
  - Remove call to %{insserv_force_if_yast dbus} initscripts are
    removed and this causes errors. bsc#1046173


author: sflees@suse.de
changelog:
  - Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
    * added fix-CVE-2019-12749.patch


author: msuchanek@suse.com
changelog:
  - 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352).
    * adds 0586-95zfcp_rules-parse-zfcp.sh-remove-rule-existence-check.patch


author: daniel.molkentin@suse.com
changelog:
  - Fix a missing space in example configs (boo#1121251)
    * adds 0587-Fix-a-missing-space-in-example-configs.patch


author: daniel.molkentin@suse.com
changelog:
  -  emergency mode: bring shell and all vital information to
    all ttys specified as console devices
    (FATE#325386, bsc#1053248, bsc#937555)
    * Adds 0585-emergency-mode-use-sulogin.patch
  - Fix displaying text on emergency consoles (boo#1124088)
    * adds 0589-Fix-displaying-text-on-emergency-consoles.patch


author: daniel.molkentin@suse.com
changelog:
  - 91zipl: Don't use contents of commented lines (osc#1119499)
    * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch


author: daniel.molkentin@suse.com
changelog:
  - Correct fix for displaying text on emergency consoles (boo#1124088)
    * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
    * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
  - 95iscsi: handle qedi like bnx2i (bsc#1113712)
    * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch


author: daniel.molkentin@suse.com
changelog:
  - purge-kernels: Avoid endless loop when uninstalling kernels that depend on
    KMPs which in themselves depend on other packages (bsc#1125327)


author: daniel.molkentin@suse.com
changelog:
  - Check SUSE kernel module dependencies recursively (bsc#1127891)
    * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
  - Avoid "Failed to chown ... Operation not permitted" when run from non-root,
    by not copying xattrs. (osc#1092178)
    * adds 0593-dracut-only-copy-xattr-if-root.patch


author: schwab@suse.de
changelog:
  - s390-unwind-info.patch: S390: Add cfi information for start routines in
    order to stop unwinding (bsc#1128574)


author: schwab@suse.de
changelog:
  - resolv-internal-qtype.patch: resolv: Fix crash with internal QTYPE
    (CVE-2015-5180, bsc#941234, BZ #18784)


author: schwab@suse.de
changelog:
  - 0031-S390-Use-mvcle-for-copies-1MB-on-32bit-with-default-.patch,
    0032-S390-Use-64bit-instruction-to-check-for-copies-of-1M.patch,
    0033-S390-Do-not-call-memcpy-memcmp-memset-within-libc.so.patch,
    0034-S390-Implement-mempcpy-with-help-of-memcpy.-BZ-19765.patch,
    0035-S390-Do-not-clobber-r13-with-memcpy-on-31bit-with-co.patch,
    0036-s390-Refactor-ifunc-resolvers-due-to-false-debuginfo.patch,
    0037-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
    0038-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
    0039-S390-Unify-31-64bit-memcpy.patch,
    0040-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
    0041-S390-Remove-s390-specific-implementation-of-bcopy.patch,
    0042-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
    0043-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
    0044-S390-Add-z13-memmove-ifunc-variant.patch,
    0045-S390-Add-z13-strstr-ifunc-variant.patch,
    0046-S390-Add-z13-memmem-ifunc-variant.patch,
    0047-S390-Cleanup-ifunc-resolve.h.patch,
    0048-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
    0049-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
    0050-S390-Add-configure-check-to-detect-support-for-arch1.patch,
    0051-S390-Add-arch13-memmove-ifunc-variant.patch,
    0052-S390-Add-arch13-strstr-ifunc-variant.patch,
    0053-S390-Add-arch13-memmem-ifunc-variant.patch: Hardware support in
    toolchain - glibc part (fate#327072, bsc#1132678)


author: schwab@suse.de
changelog:
  - s390-strstr-page-boundary.patch: S390: Fix handling of needles crossing
    a page in strstr z15 ifunc-variant (bsc#1157893, BZ #25226)


author: schwab@suse.de
changelog:
  - posix-Add-internal-symbols-for-posix_spawn-interface.patch,
    glibc-2.26-Assume-that-pipe2-is-always-available.patch,
    glibc-2.29-posix-Use-posix_spawn-on-popen.patch: Use posix_spawn on
    popen (bsc#1149332, BZ #22834)


author: schwab@suse.de
changelog:
  - ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range
    reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)


author: schwab@suse.de
changelog:
  - backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC
    (CVE-2020-1751, bsc#1158996, BZ #25423)
  - glob-use-after-free.patch: Fix use-after-free in glob when expanding
    ~user (CVE-2020-1752, bsc#1167631, BZ #25414)


author: schwab@suse.de
changelog:
  - nptl-setxid-race.patch: nptl: wait for pending setxid request also in
    detached thread (bsc#1162930, BZ #25942)


author: dap.darkness@gmail.com
changelog:
  - Update to version 1.15.4:
    * vlock: New utility which locks one or more virtual consoles.
    * loadkeys: Change the handling of -C option.
    * loadkeys: Fix -d option.
    * Add dvorak-es keymap.
    * Add dvorak-uk keymap (Joe MacMahon).
    * Add dvorak-sv-a1 and dvorak-sv-a5 keymaps.
    * Add ruwin_alt_sh-UTF-8 keymap (Dmitriy Perlow).
  - kbd-1.15.3-po-es.patch was fixed.
  - Applied into upstream patches were deleted.
  - Fixed up via spec-cleaner.
  - Clean-section was removed.
  - Macro warnings were fixed via '%' deleting.


author: dap.darkness@gmail.com
changelog:
  - Update to version 1.15.5:
    * Fix msgstr in es.po and update translations.
    * Update changelog and increase version (1.15.5wip).
    * po: Update vi.po from translationproject.org.
    * Fix various vlock build errors.
    * Fix loadkeys.analyze lex handling.
    * Ignore config.cache files.
  - Applied into upstream kbd-1.15.3-po-es.patch was deleted.


author: crrodriguez@opensuse.org
changelog:
  - Remove sysvinit support, init scripts from this package
    are masked by systemd and only serve for confusion.


author: marceloatie@gmail.com
changelog:
  - Fix data/keymaps/i386/querty/br-abnt2.map
    (boo#984958, kbd-1.15.5-br-abnt2-slash-question.patch)


author: sbrabec@suse.com
changelog:
  - Update to version 2.0.4 from SLE 15 (FATE#325454):
    * Thu Apr  5 17:32:03 CEST 2018 - sbrabec@suse.com
    * Disable characters >=U+F000. These do not work properly
      (bsc#1085432#c15, kbd-unicode-fxxx.patch).
    * Thu Mar 15 17:04:06 CET 2018 - sbrabec@suse.com
    * Do not cause error on UNICODE characters >= 0xF000 (e. g.
      ligature fi) (bsc#1085432, kbd-unicode-fxxx.patch).
    * Fri Jan 12 17:39:18 CET 2018 - sbrabec@suse.com
    * Move initial NumLock handling from systemd back to kbd:
    * Add kbdsettings service written by Thomas Blume (boo#1010880,
      kbdsettings, kbdsettings.service, numlockbios.c,
      update sysconfig.console and sysconfig.keyboard).
    * Exclude numlockbios support for non x86 platforms
      (kbdsettings-nox86.patch).
    * Drop references to KEYTABLE and COMPOSETABLE (boo#1010880#c32,
      boo#1010880#c54,  sysconfig.keyboard.del, README.SUSE,
      drop kbd.fillup).
    * Fix paths in kbd.pl.
    * Wed Dec  6 13:30:49 UTC 2017 - fbui@suse.com
    * Drop from some fill-up templates, a couple of sysconfig variables no
      more read by systemd (fate#319454)
      So the relevant settings can be defined in only one place.
    * Thu Nov 23 13:40:21 UTC 2017 - rbrown@suse.com
    * Replace references to /var/adm/fillup-templates with new
      %_fillupdir macro (boo#1069468)
    * Fri Oct 13 14:53:41 CEST 2017 - sbrabec@suse.com
    * Add vlock.pamd PAM file (bsc#1056449#c8).
    * Clean spec file.
    * Fri Sep 22 15:51:51 CEST 2017 - sbrabec@suse.com
    * Version update to 2.0.4:
    * translation updates
    * support for U+202F
    * minor fixes and code cleanup
    * minor improvements and more characters support
    * Enable vlock (bsc#1056449, FATE#261).
    * Sun Apr 30 04:31:25 UTC 2017 - bwiedemann@suse.com
    * call gzip -n to make build fully reproducible
    * Thu Mar 23 23:23:20 UTC 2017 - zaitor@opensuse.org
    * Revert dropping of kdb-legacy Requires: There are still packages
      and installation flows that needs this to be present
      (boo#1027379).
    * Sun Feb 12 23:37:52 UTC 2017 - zaitor@opensuse.org
    * Drop kdb-legacy Requires: No longer needed, and was always meant
      to be temporary.
    * Tue Jul 12 12:52:31 UTC 2016 - tchvatal@suse.com
    * Version update to 2.0.3:
    * Various small updates
    * Obsolete merged patch:
    * kbd-1.15.5-br-abnt2-slash-question.patch
    * Quickly run over with spec-cleaner
    * Remove arch check for alpha and other unused platforms
    * Drop kbd.fillup.nonpc as it should not be needed nowdays
    * Thu Jun 16 00:18:55 CET 2016 - marceloatie@gmail.com
    * Fix data/keymaps/i386/querty/br-abnt2.map
      (boo#984958, kbd-1.15.5-br-abnt2-slash-question.patch)
    * Thu Dec 10 16:31:10 CET 2015 - tiwai@suse.de
    * Fix missing dependency on coreutils for initrd macros (boo#958562)
    * Call missing initrd macro at postun (boo#958562)
    * Fri Aug 21 10:50:21 UTC 2015 - opensuse.lietuviu.kalba@gmail.com
    * Rename conflicting legacy keymaps:
    * dvorak/no.map -> dvorak/no-dvorak.map
    * fgGIod/trf.map -> fgGIod/trf-fgGIod.map
    * olpc/pt.map -> olpc/pt-olpc.map
    * qwerty/cz.map -> qwerty/cz-qwerty.map
    * i386/qwerty/sr-latin links to sr-cy
    * add compose rules to cz layout (rh#1181581)
    * Mon Aug 10 11:53:48 UTC 2015 - sndirsch@suse.com
    * genmap4systemd.sh: use 'abnt2' model for 'br' layouts, 'jp106'
      model for 'jp' layouts and 'microsoftpro' for anything else
      (instead of 'pc105' before) (FATE#318426)
    * Tue Jul 21 10:05:35 UTC 2015 - sndirsch@suse.com
    * added genmap4systemd.sh tool, which generates entries for
      systemd's /usr/share/systemd/kbd-model-map table from
      xkeyboard-config converted keymaps; entries are written to
      /usr/share/systemd/kbd-model-map.xkb-generated, so these can
      easily be added to /usr/share/systemd/kbd-model-map by systemd
      package (FATE#318426)
    * Fri Jul 17 12:54:27 UTC 2015 - sndirsch@suse.com
    * Include xkb layouts from xkeyboard-config converted to console
      keymaps, (FATE#318426)
    * Rename Finnish xkb converted layout
    * Add xkb and legacy keymaps subdirs to loadkyes search path
      (kbd-1.15.5-loadkeys-search-path.patch), remove symlinks,
      Don't convert layouts that can't input ASCII,
    * Original keymaps moved to legacy dir, created symlinks to xkb
      keymaps
    * Thu Apr  2 18:36:23 UTC 2015 - crrodriguez@opensuse.org
    * For the previos change to wok, we need to buildrequire
      suse-module-tools to get the initrd rpm macros.
    * Sat Mar 28 21:15:08 UTC 2015 - crrodriguez@opensuse.org
    * Regenerate the initrd if this package changes as it is
      included there for early console setup.
    * Tue Feb 10 15:45:09 UTC 2015 - tchvatal@suse.com
    * Convert changelog to utf8
    * Sat Nov 29 22:14:00 UTC 2014 - Led <ledest@gmail.com>
    * fix bashisms in scripts
    * add patches:
    * kbd-2.0.2-fix-bashisms.patch
    * update patches:
    * kbd-1.15.2-unicode_scripts.patch
    * Thu Sep 25 10:33:55 UTC 2014 - pgajdos@suse.com
    * euro{,1,2}.map now produces correct unicode for Euro sign
      [bnc#360993]
    * added patches:
    * kbd-2.0.2-euro-unicode.patch
    * Thu Sep 18 10:54:51 UTC 2014 - pgajdos@suse.com
    * port dumpkeys-C-opt.patch
    * modified patches:
    * kbd-1.15.2-dumpkeys-C-opt.patch
    * Fri Sep 12 09:52:30 UTC 2014 - pgajdos@suse.com
    * kbd-2.0.2-doshell-reference.patch:
      drop doshell reference from openvt.1 man page [bnc#675317]
    * Thu Sep  4 17:51:54 UTC 2014 - jw@owncloud.com
    * added /usr/bin/kbd, a simple userfriedly keymap switcher.
      From https://github.com/jnweiger/kbd-wrapper
    * Fri Aug 22 09:50:15 UTC 2014 - pgajdos@suse.com
    * drop kbd-1.15.2-chvt-userwait.patch [bnc#830805] (internal)
      (--userwait seems to not be used anywhere)
    * Fri Aug 22 09:25:51 UTC 2014 - pgajdos@suse.com
    * remove testutf8 stub (2009: testutf8 will be soon removed completely,
      it's kept only not to break /etc/profile currently)
    * Fri Aug 22 06:51:23 UTC 2014 - pgajdos@suse.com
    * Update to version 2.0.2:
      libkeymap: fix kmap on big-endian machines
      Add functions to get the total number of elements
      Add functions to convert ksyms
      eurlatgr - new Linux console font
      Hide syms array
      Add information about the total number of elements
      Add function to obtain items from the diacritical table
      Change the API for working with the diacritical table
      Change API for working with list of functions
      Add functions to check diacr/func existance
      Add pancyrillic font
      po: Update translations (from translationproject.org)
      vlock: implement PAM account and password management
      vlock: rename ERROR_TIMEOUT macro to LONG_DELAY
      vlock: introduce short delays after non-fatal PAM errors
      Added Latvian keymap
      (changelog taken from
      http://lists.altlinux.org/pipermail/kbd/2014-July/000476.html)
    * add kbd-2.0.2-comment-typo-qwerty.patch [bnc#825385]
    * Thu Jul 24 20:31:47 UTC 2014 - dimstar@opensuse.org
    * No longer recommend fbset: the package does no longer exist in
      openSUSE since late 2013.
    * Sun Nov  3 17:51:09 UTC 2013 - dap.darkness@gmail.com
    * Update to version 2.0.1:
    * Disable arch-specific tests.
    * Fix regression in processing alt_is_meta keyword.
    * Rename Bepo keymaps:
      dvorak-fr-bepo.map -> fr-bepo-latin9.map
      dvorak-fr-bepo-utf8.map -> fr-bepo.map.
    * Deleted kbd-1.15.2-dumpkeys-ppc.patch as obsolete:
      http://lists.opensuse.org/opensuse-factory/2013-08/msg00347.html
    * gcc 4.6+ became required to prevent compilling error:
      "expected declaration specifiers or '...' before 'va_list'".
    * Mon Aug 19 18:27:19 UTC 2013 - dap.darkness@gmail.com
    * Update to version 2.0.0:
    * Add bepo keyboard layout;
    * Add libkeymap;
    * The loadkeys and dumpkeys always use the libkeymap.
    * Updated patches because of docs moved:
    * kbd-1.15.2-chvt-userwait.patch
    * kbd-1.15.2-docu-X11R6-xorg.patch
    * Disabled patches because of dumpkeys rewritten:
    * kbd-1.15.2-dumpkeys-C-opt.patch
    * kbd-1.15.2-dumpkeys-ppc.patch


author: lduncan@suse.com
changelog:
  - scsi: libsas: fix a race condition when smp task timeout
    (CVE-2018-20836 bsc#1134395).
  - commit 29c72b8


author: mhocko@suse.com
changelog:
  - Update patches.suse/do-not-default-to-ibrs-on-skl.patch
    (bsc#1068032 CVE-2017-5753 bsc#1112824 jsc#SLE-7074).
  - commit e209c50


author: tbogendoerfer@suse.de
changelog:
  - tun: allow positive return values on dev_get_valid_name() call
    (bsc#1135603 CVE-2018-7191).
  - tun: call dev_get_valid_name() before register_netdevice()
    (bsc#1135603 CVE-2018-7191).
  - commit c14bc34


author: mkubecek@suse.cz
changelog:
  - Update "TCP SACK Panic" series
  - Update upstream references (add CVE-2019-11477 bsc#1137586):
    patches.fixes/tcp-limit-payload-size-of-sacked-skbs.patch
    patches.fixes/tcp-tcp_fragment-should-apply-sane-memory-limits.patch
    patches.fixes/tcp-add-tcp_min_snd_mss-sysctl.patch
    patches.fixes/tcp-enforce-tcp_min_snd_mss-in-tcp_mtu_probing.patch
  - Merge patches.fixes/tcp-fix-fack_count-accounting-on-tcp_shift_skb_data.patch
    into patches.fixes/tcp-limit-payload-size-of-sacked-skbs.patch
    to match what stable-4.4 has.
  - commit 1da6a82


author: mkubecek@suse.cz
changelog:
  - tcp: refine memory limit test in tcp_fragment() (CVE-2019-11478
    bsc#1137586 bsc#1139751).
  - Refresh
    patches.kabi/kabi-drop-LINUX_MIB_TCPWQUEUETOOBIG-snmp-counter.patch.
  - commit a0d7e38


author: tbogendoerfer@suse.de
changelog:
  - Fix ixgbe backport (bsc#1133140)
  - Refresh
    patches.drivers/ixgbe-Break-out-Rx-buffer-page-management.patch.
  - Refresh
    patches.drivers/ixgbe-Update-driver-to-make-use-of-DMA-attributes-in.patch.
  - commit c4ef1b9


author: mhocko@suse.com
changelog:
  - Update
    patches.fixes/0001-mwifiex-Fix-heap-overflow-in-mwifiex_uap_parse_tail_.patch
    (bsc#1136935, CVE-2019-10126).
  - commit 408da56


author: mkubecek@suse.cz
changelog:
  - kabi: handle addition of netns_ipv4::ip_id_key (CVE-2019-10638
    bsc#1140575).
  - kabi: handle addition of net::hash_mix (CVE-2019-10639
    bsc#1140577).
  - inet: switch IP ID generator to siphash (CVE-2019-10638
    bsc#1140575).
  - netns: provide pure entropy for net_hash_mix() (CVE-2019-10639
    bsc#1140577).
  - netns: get more entropy from net_hash_mix() (CVE-2019-10638
    bsc#1140575).
  - siphash: add cryptographically secure PRF (CVE-2019-10638
    bsc#1140575).
  - commit 8291104


author: jslaby@suse.cz
changelog:
  - net: ipv4: devinet: Fix crash when add/del multicast IP with
    autojoin (networking-stable-20_04_17).
  - l2tp: Allow management of tunnels and session in user namespace
    (networking-stable-20_04_17).
  - hsr: check protocol version in hsr_newlink()
    (networking-stable-20_04_17).
  - net: revert default NAPI poll timeout to 2 jiffies
    (networking-stable-20_04_17).
  - net: ipv6: do not consider routes via gateways for anycast
    address check (networking-stable-20_04_17).
  - commit 6d6a932


author: jslaby@suse.cz
changelog:
  - net: bcmgenet: correct per TX/RX ring statistics
    (networking-stable-20_04_27).
  - net/x25: Fix x25_neigh refcnt leak when receiving frame
    (networking-stable-20_04_27).
  - mlxsw: Fix some IS_ERR() vs NULL bugs
    (networking-stable-20_04_27).
  - net: dsa: b53: Rework ARL bin logic
    (networking-stable-20_04_27).
  - net: dsa: b53: Fix ARL register definitions
    (networking-stable-20_04_27).
  - vrf: Check skb for XFRM_TRANSFORMED flag
    (networking-stable-20_04_27).
  - xfrm: Always set XFRM_TRANSFORMED in xfrm{4,6}_output_finish
    (networking-stable-20_04_27).
  - team: fix hang in team_mode_get() (networking-stable-20_04_27).
  - tcp: cache line align MAX_TCP_HEADER
    (networking-stable-20_04_27).
  - net/mlx4_en: avoid indirect call in TX completion
    (networking-stable-20_04_27).
  - net: netrom: Fix potential nr_neigh refcnt leak in nr_add_node
    (networking-stable-20_04_27).
  - commit ed7fd2b


author: tiwai@suse.de
changelog:
  - relay: handle alloc_percpu returning NULL in relay_open
    (CVE-2019-19462 bsc#1158265).
  - commit a0b3f3d


author: tiwai@suse.de
changelog:
  - video: fbdev: w100fb: Fix a potential double free (bsc#1051510).
  - drm/dp_mst: Reformat drm_dp_check_act_status() a bit
    (bsc#1051510).
  - agp/intel: Reinforce the barrier after GTT updates
    (bsc#1051510).
  - ACPI: CPPC: Fix reference count leak in
    acpi_cppc_processor_probe() (bsc#1051510).
  - ACPI: sysfs: Fix reference count leak in
    acpi_sysfs_add_hotplug_profile() (bsc#1051510).
  - mmc: sdhci-msm: Clear tuning done flag while hs400 tuning
    (bsc#1051510).
  - mmc: sdhci-esdhc-imx: fix the mask for tuning start point
    (bsc#1051510).
  - mmc: sdio: Fix potential NULL pointer error in
    mmc_sdio_init_card() (bsc#1051510).
  - Input: synaptics-rmi4 - fix error return code in
    rmi_driver_probe() (bsc#1051510).
  - Input: i8042 - add ThinkPad S230u to i8042 reset list
    (bsc#1051510).
  - Input: xpad - add custom init packet for Xbox One S controllers
    (bsc#1051510).
  - Input: evdev - call input_flush_device() on release(), not
    flush() (bsc#1051510).
  - Input: usbtouchscreen - add support for BonXeon TP
    (bsc#1051510).
  - usb: gadget: legacy: fix redundant initialization warnings
    (bsc#1051510).
  - gpio: tegra: mask GPIO IRQs during IRQ shutdown (bsc#1051510).
  - commit 6d9200f


author: tiwai@suse.de
changelog:
  - media: platform: fcp: Set appropriate DMA parameters
    (bsc#1051510).
  - media: dvb: return -EREMOTEIO on i2c transfer failure
    (bsc#1051510).
  - wcn36xx: Fix error handling path in 'wcn36xx_probe()'
    (bsc#1051510).
  - mwifiex: Fix memory corruption in dump_station (bsc#1051510).
  - rtlwifi: Fix a double free in _rtl_usb_tx_urb_setup()
    (bsc#1051510).
  - mwifiex: avoid -Wstringop-overflow warning (bsc#1051510).
  - b43legacy: Fix case where channel status is corrupted
    (bsc#1051510).
  - clocksource: dw_apb_timer_of: Fix missing clockevent timers
    (bsc#1051510).
  - NFC: st21nfca: add missed kfree_skb() in an error path
    (bsc#1051510).
  - mac80211: mesh: fix discovery timer re-arming issue / crash
    (bsc#1051510).
  - commit 0ccd007


author: tiwai@suse.de
changelog:
  - spi: dw: Add SPI Rx-done wait method to DMA-based transfer
    (bsc#1051510).
  - spi: dw: Add SPI Tx-done wait method to DMA-based transfer
    (bsc#1051510).
  - spi: dw: Zero DMA Tx and Rx configurations on stack
    (bsc#1051510).
  - spi: bcm-qspi: when tx/rx buffer is NULL set to 0 (bsc#1051510).
  - spi: bcm63xx-hsspi: Really keep pll clk enabled (bsc#1051510).
  - spi/zynqmp: remove entry that causes a cs glitch (bsc#1051510).
  - spi: pxa2xx: Add CS control clock quirk (bsc#1051510).
  - spi: qup: call spi_qup_pm_resume_runtime before suspending
    (bsc#1051510).
  - commit 1f6eb8e


author: nsaenzjulienne@suse.de
changelog:
  - Refresh patches.suse/spi-spi-s3c64xx-fix-system-resume-support.patch.
    This SPI controller is only built for leap15.1, so we didn't catch this
    issue earlier.
  - commit d79175f


author: mmarek@suse.cz
changelog:
  - testsutie: Uncompress most modules (updated test-files.tar.xz)
  - testsuite: Do not run tests with *.ko.gz if zlib is not enabled
  - Disable compression support, as other tools do not support it
    (e.g. module signing)


author: mmarek@suse.cz
changelog:
  - Updated to kmod 17
    * Do not require xsltproc for build
    * Parse softdeps stored in kernel modules
    * Add experimental python bindings (not enabled in the package yet)
    * Misc bugfixes
  - Deleted patches that went upstream. Only the unsupported modules
    feature remains:
    0002-modprobe-Recognize-allow-unsupported-modules-on-comm.patch
    0003-libkmod-config-Recognize-allow_unsupported_modules-i.patch
    0009-libkmod-Implement-filtering-of-unsupported-modules-o.patch
    0010-modprobe-Implement-allow-unsupported-modules.patch
    0001-Do-not-filter-unsupported-modules-when-running-a-van.patch


author: dvaleev@suse.com
changelog:
  - Fix kernel master build for ppc64le (bsc#1070209)
    depmod-Ignore_PowerPC64_ABIv2_.TOC.symbol.patch


author: mmarek@suse.cz
changelog:
  - libkmod: Handle long lines in /proc/modules (bsc#983754)
    0001-libkmod-Handle-long-lines-in-proc-modules.patch


author: martin.wilck@suse.com
changelog:
  - Fix race while loading modules (bsc#998906)
    * Add 0001-Fix-race-while-loading-modules.patch (upstream fd44a98)


author: msuchanek@suse.com
changelog:
  - Fix resolving .TOC. in modules on 4.4 and older kernel (bsc#1070209)
    depmod-Don-t-add-.TOC.-when-it-s-in-the-kernel.patch


author: msuchanek@suse.de
changelog:
  - Fix module dependency file corruption on parallel invocation (bsc#1118629).
    depmod-Prevent-module-dependency-files-corruption-du.patch
    depmod-Prevent-module-dependency-files-missing-durin.patch


author: msuchanek@suse.de
changelog:
  - Fix warming in libkmod.h (boo#1097869).
    kmod-build-cure-compiler-warnings-showing-up-externa.patch
  - Prevent potential buffer overflow in libkmod (bsc#1118629).
    depmod-shut-up-gcc-insufficinet-buffer-warning.patch


author: vcizek@suse.com
changelog:
  - OpenSSL Security Advisory [30 October 2018]
    * Timing vulnerability in DSA signature generation
      (bsc#1113652, CVE-2018-0734)
    * And more timing fixes (bsc#1113742)
  - Add patches:
    * openssl-CVE-2018-0734.patch
    * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
    * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch


author: vcizek@suse.com
changelog:
  - Elliptic curve scalar multiplication timing attack defenses
    * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
  - Add openssl-CVE-2018-5407-PortSmash.patch


author: vcizek@suse.com
changelog:
  - Set TLS version to 0 in msg_callback for record messages to avoid
    confusing applications (bsc#1100078)
    * add openssl-record_msg_callback.patch
  - Fix infinite loop in DSA generation with incorrect parameters
    (bsc#1112209)
    * add 0001-DSA-Check-for-sanity-of-input-parameters.patch


author: vcizek@suse.com
changelog:
  - The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
    Implementations (bsc#1117951)
    * https://github.com/openssl/openssl/issues/7739
  - add patches
    * 0001-crypto-bn-add-more-fixed-top-routines.patch
    * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
    * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
    * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
    * 0005-err-err.c-add-err_clear_last_constant_time.patch
    * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
    * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
    * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
    * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch


author: vcizek@suse.com
changelog:
  - Fix 0-byte record padding oracle via SSL_shutdown
    (bsc#1127080, CVE-2019-1559)
    * add openssl-CVE-2019-1559.patch


author: pmonrealgonzalez@suse.com
changelog:
  - OpenSSL Security Advisory [10 September 2019]
    * EC_GROUP_set_generator side channel attack avoidance. [bsc#1150003, CVE-2019-1547]
    * Bleichenbacher attack against cms/pkcs7 encryption transported key [bsc#1150250, CVE-2019-1563]
  - Added patches:
    * openssl-CVE-2019-1547.patch
    * openssl-CVE-2019-1563.patch


author: vcizek@suse.com
changelog:
  - Prevent invalid curve attacks by validating that an EC point lies
    on the curve (bsc#1131291)
    * add 0001-RT-4242-reject-invalid-EC-point-coordinates.patch


author: pmonrealgonzalez@suse.com
changelog:
  - Security fix: [bsc#1158809, CVE-2019-1551]
    * Overflow bug in the x64_64 Montgomery squaring procedure used
      in exponentiation with 512-bit moduli
  - Add openssl-1_1-CVE-2019-1551.patch


author: vcizek@suse.com
changelog:
  - Obsolete openssl-debuginfo
    * the package doesn't exist any more, has been replaced by
      openssl-{so_version}-debuginfo (bsc#1040172)


author: vcizek@suse.com
changelog:
  - Revert version back to 1.0.2m to get security fixes quickly to
    Tumbleweed
    * OpenSSL Security Advisory [02 Nov 2017] (bsc#1066242,bsc#1056058)


author: vcizek@suse.com
changelog:
  - change the sonum to 1.1, as all the minor versions keep ABI
    compatibility (bsc#1081335)
  - update baselibs.conf


author: vcizek@suse.com
changelog:
  - Packaged for SLE-12-SP4 (fate#325336)
    * point to 1.0.2h
    * adjust baselibs to 1_0_0
    - recommend openssl from libopenssl-devel


author: mmarek@suse.cz
changelog:
  - Update to kernel headers 4.4 (fate#320305).
  - Remove pre-4.4 backports:
    0001-packet-fill-the-gap-of-TPACKET_ALIGNMENT-with-zeros.patch
    0001-powerpc-Include-the-appropriate-endianness-header.patch
    0001-s390-kernel-add-system-calls-for-PCI-memory-access.patch
    0002-packet-deliver-VLAN-TPID-to-userspace.patch


author: mmarek@suse.cz
changelog:
  - Sync <rdma/hfi/hfi1_user.h> with the SLE12-SP2 kernel
    (bsc#973818, fate#319242, bsc#981074).
    Added following patches:
    staging-hfi1-enable-tid-caching-feature.patch
    staging-rdma-hfi1-adjust-eprom-partitions-add-eprom-.patch
    staging-rdma-hfi1-clean-up-macro-indentation.patch
    uapi-hfi1_user-add-command-and-event-for-tid-caching.patch
    uapi-hfi1_user-correct-comment-for-capability-bit.patch


author: mmarek@suse.cz
changelog:
  - Backport ND_CMD_CALL ioctl to <linux/ndctl.h> (FATE#319858, bsc#986519)
    0001-nfit-libnvdimm-limited-whitelisted-dimm-command-mars.patch


author: mmarek@suse.com
changelog:
  - Sync <rdma/hfi/hfi1_user.h> with the SLE12-SP3 kernel (bsc#1040698)
    Added / renamed patches:
    staging-rdma-hfi1-clean-up-macro-indentation.patch
    - > 0001-staging-rdma-hfi1-Clean-up-macro-indentation.patch
    staging-rdma-hfi1-adjust-eprom-partitions-add-eprom-.patch
    - > 0002-staging-rdma-hfi1-Adjust-EPROM-partitions-add-EPROM-.patch
    uapi-hfi1_user-correct-comment-for-capability-bit.patch
    - > 0003-uapi-hfi1_user-Correct-comment-for-capability-bit.patch
    uapi-hfi1_user-add-command-and-event-for-tid-caching.patch
    - > 0004-uapi-hfi1_user-Add-command-and-event-for-TID-caching.patch
    staging-hfi1-enable-tid-caching-feature.patch
    - > 0005-staging-hfi1-Enable-TID-caching-feature.patch
    0006-IB-hfi1-Remove-multiple-device-cdev.patch
    0007-IB-hfi1-Remove-EPROM-functionality-from-data-device.patch
    0008-IB-hfi1-Remove-unused-user-command.patch
    0009-IB-hfi1-Add-ioctl-interface-for-user-commands.patch
    0010-IB-hfi1-Remove-write-use-ioctl-for-user-cmds.patch
    0011-IB-hfi1-Allow-for-non-double-word-multiple-message-s.patch
    0012-IB-hfi1-Disable-header-suppression-for-short-packets.patch
    0013-RDMA-core-Commonize-RDMA-IOCTL-declarations-location.patch
    0014-RDMA-core-Move-legacy-MAD-IOCTL-declarations-to-comm.patch
    0015-RDMA-hfi1-Avoid-redeclaration-error.patch
    0016-RDMA-core-Move-HFI1-IOCTL-declarations-to-common-fil.patch
    0017-RDMA-core-Rename-RDMA-magic-number.patch
    0018-RDMA-core-Unify-style-of-IOCTL-commands.patch


author: schwab@suse.de
changelog:
  - Update to kernel headers 4.12 (bsc#1103375, FATE#318470)
  - Removed patches upstreamed between 4.4 and 4.12:
      0001-staging-rdma-hfi1-Clean-up-macro-indentation.patch
      0002-staging-rdma-hfi1-Adjust-EPROM-partitions-add-EPROM-.patch
      0003-uapi-hfi1_user-Correct-comment-for-capability-bit.patch
      0004-uapi-hfi1_user-Add-command-and-event-for-TID-caching.patch
      0005-staging-hfi1-Enable-TID-caching-feature.patch
      0006-IB-hfi1-Remove-multiple-device-cdev.patch
      0007-IB-hfi1-Remove-EPROM-functionality-from-data-device.patch
      0008-IB-hfi1-Remove-unused-user-command.patch
      0009-IB-hfi1-Add-ioctl-interface-for-user-commands.patch
      0010-IB-hfi1-Remove-write-use-ioctl-for-user-cmds.patch
      0011-IB-hfi1-Allow-for-non-double-word-multiple-message-s.patch
      0012-IB-hfi1-Disable-header-suppression-for-short-packets.patch
      0013-RDMA-core-Commonize-RDMA-IOCTL-declarations-location.patch
      0014-RDMA-core-Move-legacy-MAD-IOCTL-declarations-to-comm.patch
      0015-RDMA-hfi1-Avoid-redeclaration-error.patch
      0016-RDMA-core-Move-HFI1-IOCTL-declarations-to-common-fil.patch
      0017-RDMA-core-Rename-RDMA-magic-number.patch
      0018-RDMA-core-Unify-style-of-IOCTL-commands.patch
      0001-nfit-libnvdimm-limited-whitelisted-dimm-command-mars.patch


author: dimstar@opensuse.org
changelog:
  - BuildIgnore linux-kernel-headers: the symbol will only exist once
    the package was built in a bootstrap cycle.
  - BuildIgnore gettext-tools: required by rpm-build, but we can
    build without it, allowing to shorten a bootstrap cycle.


author: bwiedemann@suse.com
changelog:
  - Don't embed build system's kernel version in rpm
    to make package build reproducible (boo#1101107)


author: werner@suse.de
changelog:
  - Add patch ncurses-5.9-bsc1115929.patch
    * For bug bsc#1115929 port back null pointer checks to catch e.g.
      the crash in _nc_parse_entry(), belongs to CVE-2018-19211


author: werner@suse.de
changelog:
  - Modify patch ncurses-5.9-bsc1115929.patch as the change in
    form_driver() breaks ncurses-5.9 and the variable move_after_insert
    of ncurses-6.1 is not known in 5.9 (bsc#1121450)


author: werner@suse.de
changelog:
  - Add patch ncurses-5.9-bsc1131830.patch which is a backport from
    6.1 to fix a crash seen in 5.9 (bsc#1131830, CVE-2018-10754)


author: werner@suse.de
changelog:
  - Add patches
    CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
      buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
    CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
      buffer over-read in fmt_entry function in tinfo/comp_hash.c


author: werner@suse.de
changelog:
  - Fix last change, that is add missed library linker paths as well
    as missed include directories for none standard paths (bsc#1158586,
    bsc#1159162)
  - Let helper script handle.linux call sed command smart


author: werner@suse.de
changelog:
  - Also remove private requirements as (lib)tinfo are binary compatible
    with normal and wide version of (lib)ncurses (bsc#1158586, bsc#1159162)


author: mchang@suse.com
changelog:
  - merge gh#openSUSE/perl-bootloader#112
  - implemented trusted boot/TPM support in UEFI mode (bsc#1036735,
    fate#315831)
  - 0.918


author: wfeldt@opensuse.org
changelog:
  - merge gh#openSUSE/perl-bootloader#116
  - add --get-option to pbl (bsc#1033776, bsc#1050349)
  - 0.921


author: wfeldt@opensuse.org
changelog:
  - merge gh#openSUSE/perl-bootloader#117
  - work without /etc/default/grub_installdevice (bsc#1079321,
    bsc#994322)
  - removed unused function


author: coolo@novell.com
changelog:
  - Readd pkg-config-dnl.patch, see
    http://lists.gnu.org/archive/html/autoconf/2010-07/msg00035.html


author: dimstar@opensuse.org
changelog:
  - Update to version 0.27:
    + Drop usage of popt for equivalent API in glib2
    + Add back an internal snapshot of glib2 to break circular
      dependency
    + Fix --exists to check for Requires and Requires.private.
    + Various fixes for MinGW which should allow it to be used
      unpatched on that system
    + New autoconf macros PKG_INSTALLDIR and PKG_NOARCH_INSTALLDIR to
      help determine the .pc file install directory
    + Fix handling of --exact/atleast/max-version vs. =/>=/<=
    + Fix errors in man page source
    + Ensure testing only searches in the check directory
    + Bump glib requirement to 2.16 to avoid deprecated
      g_win32_get_package_installation_subdirectory()
    + Autotools refresh and update
    + Use g_alloca from glib instead of figuring out alloca ourselves
    + Remove search for setresuid & setreuid only needed for internal
      popt
    + Bugs fixed: fdo#833, fdo#2458, fdo#5214, fdo#5326, fdo#5703,
      fdo#6074, fdo#8653, fdo#9135, fdo#9143, fdo#9584, fdo#10652,
      fdo#11464, fdo#14396, fdo#17053, fdo#23922, fdo#28776,
      fdo#29011, fdo#29801, fdo#31699, fdo#31700, fdo#32622,
      fdo#34382, fdo#37266, fdo#39646, fdo#41081, fdo#43149,
      fdo#44843, fdo#45599, fdo#45742, fdo#48743
  - Changes from version 0.26:
    + Build system fixes
    + More tests
    + pkg.m4 fixups which makes autoconf 2.66 happier.
    + Drop support for legacy -config scripts.  Those should already
      be gone and cause problems in cross-compilation environments.
    + Drop embedded glib
    + Fix up pkg.m4 to handle the case of --exists working and
    - -cflags or --libs failing.
    + Various documentation updates
    + Allow $() through without escaping it.
    + Add --with-system-include-path instead of hard-coding
      /usr/include.
  - Pass --with-internal-glib to configure. We don't want to have a
    build cycle with glib, so we use the interal version.
  - Clean up spec-file using spec-cleaner and manually.
  - Drop pkg-config-dnl.patch: fixed upstream.


author: dimstar@opensuse.org
changelog:
  - Update to version 0.27.1:
    + Various fixes for using the internal glib snapshot. It should
      now be usable pretty much everywhere with the exception that
      universal builds are not supported on OS X.
    + Remove usage of gettext from the internal glib to avoid gettext
      and libintl dependencies
    + Update internal glib snapshot to 2.32.4
    + Fix check for POSIX shell used in tests to work better
    + Handle spaces in autodetected prefix on Windows
    + Bugs fixed: fdo#3550, fdo#51883, fdo#52031, fdo#53493.


author: p.drouand@gmail.com
changelog:
  - Update to version 0.28:
    + Fixed a pair of long-standing and intertwined bugs involving
      unwanted removal of flags:
    - Other Libs flags like -Wl are now kept in context order
      with -l flags.
    - Aggressive removal of all duplicate arguments has been scaled
      back so that just consecutive duplicate arguments are
      removed. One result of this change is that some flags could
      be repeated in the final output, especially flags from
      non-pkg-config packages like -lm. Since pkg-config rarely has
      enough knowledge here about the right thing to do, we throw
      the duplicate arguments at the compiler/linker and trust it
      will do the right thing.
    + Fixed an old bug to allow circular Requires. This fix brings
      along a small behavior change in that pkg-config resolves
      requires depth first, causing some lower level flags to show up
      earlier in the output than previously.
    + Cleaned up many corner-case bugs and ambiguous behavior in
      pkg-config's interface.
    + New autoconf macro PKG_CHECK_VAR for reading variables from .pc
      files.
    + Default to suppressing -L/lib and/or -L/lib64 like their /usr
      counterparts.
    + To help support multiarch scenarios out of the box,
      $host-pkg-config is now installed unless --disable-host-tool
      is passed to configure.
    + Added optional gcov usage through the --with-gcov configure
      option. As a result, many more tests were added to greatly
      increase the coverage of the code to 86% of executed lines on a
      Fedora 18 machine.
    + Bugs fixed: fdo#130, fdo#7331, fdo#16101, fdo#17053, fdo#19950,
      fdo#34504, fdo#48098, fdo#54231, fdo#54271, fdo#54379,
      fdo#54384, fdo#54386, fdo#54388, fdo#54389, fdo#54390,
      fdo#54391, fdo#54427, fdo#54463, fdo#54716, fdo#57078,
      fdo#58363, fdo#59435.


author: dvaleev@suse.com
changelog:
  - Don't redefine _arch, but use file pattern instead. This ensures
    we don't have to run fixing each and every arch.


author: josef.moellers@suse.com
changelog:
  - Update to version 1.3.7 (jsc#SLE-6176, bsc#1139456).
    - lparstat:
    - add an option to print the lparstat report similar to
      legacy lparstat tool
    - introduce the help command line option to print
      lparstat usage
    - restrict the physc and entc attribute values to two decimal
      places
    - correct calculation of physc to use tbr
    - Enable desired and maximum memory stats
    - Show available physical processors in the shared pool
    - scripts: Improve handling of errors from subsidiary scripts
    - man/update_flash:
    - Add details to extract rpm format image
    - Fix man page
    - ppc64_cpu: Limit number of CPUs for frequency calculation
    - lsslot:
    - Add ibm,dynamic-memory-v2 parsing capability
    - Split dynamic-memory v1 parsing into separate routine
    - Patch to display logical name using bootlist -o option
    - Refresh ofpathname_powernv.patch, systemd-dir.patch,
      Revert-lparstat-Show-available-physical-processors-i.patch


author: josef.moellers@suse.com
changelog:
  - Parse new DRC Info: Define data structures to support parsing
    the new "ibm,drc-info" device tree property.  Integrate the new
    property information into the existing search mechanisms of the
    userspace 'drmgr' driver.
    [jsc#SLE-11094, jsc#SLE-11193, jsc#SLE-11092, jsc#SLE-11319, jsc#ECO-935,
    bsc#1158312, bsc#1161925, fate#326955
    bug-1158312-parse-ibm-drc-info-property.patch]
  - Bump package version to be able to tell the fix for jsc#SLE-11092 is included
    Kernel can depend on the fixed version this way.


author: josef.moellers@suse.com
changelog:
  - * Deal with error messages returned sometimes by evaluation
      of ${devspec} in 'ofpathname'.
    * Strip embedded nulls from values provided by kernel files.
    * Redirect more error messages to /dev/null
    [bsc#1116561,
    0001-powerpc-utils-Suppress-errors-reading-kernel-files.patch]


author: josef.moellers@suse.com
changelog:
  - Fixed one instance where the previous change corrupted the
    exit status of a command.
    Redirected two error messages to stderr.
    [bsc#1164068,
    0001-powerpc-utils-Suppress-errors-reading-kernel-files.patch]


author: josef.moellers@suse.com
changelog:
  - Reduce the number of searches of /sys by each invocation
    of 'ofpathname' to at most one (1) by caching the content of a
    single search into a file in /tmp, and using 'grep' to identify
    the appropriate files for further examination.
    [bsc#1164726,
    0002-Reduce-number-of-searches-of-sys-hierarchy.patch]


author: josef.moellers@suse.com
changelog:
  - Reduce the number of searches of /sys by searching directly in
    /sys/class/block. This patch obsoletes
    0002-Reduce-number-of-searches-of-sys-hierarchy.patch
    [bsc#1164726,
    0002-Reduce-number-of-searches-of-sys-hierarchy.patch,
    bsc1164726-search-only-part-of-sys.patch]


author: josef.moellers@suse.com
changelog:
  - Remove a trailing NUL ('\0') byte from a vendor_id contents.
    [bsc#1171892, bsc1171892-get-rid-of-trainling-NUL.patch]


author: msuchanek@suse.de
changelog:
  - Add patch metadata, refresh to upstream version where available.
    * Refreshed 0001-powerpc-utils-Suppress-errors-reading-kernel-files.patch
  - The above patch was modified to fix bsc#1164068. Add a separate patch for
    that (bsc#1164068).
    * Added Fix-ofpathname-Could-not-retrieve-logical-device-nam.patch
  - Stop using /sbin/udevadm symlink (boo#1160890).
    * Added ofpathname-Fix-udevadm-location.patch


author: jlee@suse.com
changelog:
  - Add modhash tool to calculate hash of signed module.
    It strips X.509 or PKCS#7 signature before hash kernel module.
    (fate#319460)


author: mwilck@suse.com
changelog:
  - Update to version 12.5:
    * spec file: add conflicts for dracut < 44.2 (bsc#1127891)
    * modprobe.conf.common: add csiostor->cxgb4 dependency
      (bsc#1100989, bsc#1131635)
  - Fix driver-check.sh (boo#1123697, boo#1123704)
  - modsign-verify: support for parsing PKCS#7 signatures
    (bsc#1111300, bsc#1105495)


author: mwilck@suse.com
changelog:
  - Update to version 12.6:
    * weak-modules2: emit "inconsistent" warning only if replacement fails
    (bsc#1127155)


author: fbui@suse.com
changelog:
  - Really drop udev-remount-tmpfs script
    It was supposed to have been dropped in an earlier commit r221 but
    apparently only references to this script in the spec file were
    really removed.


author: fbui@suse.com
changelog:
  - Fix 0001-logind-unmount-runtime-path-in-a-dedicated-process.patch (boo#1154948)
    We need to drop the old fds used for logging and reopen them in the
    sub process before doing any new logging.


author: fbui@suse.com
changelog:
  - Import commit 9dc91e73d6ed52e92abfcdec7dbe375f04adbedc
    4dc64f3ced sd-bus: deal with cookie overruns (bsc#1150595)
    801ad7bb67 rules: Add by-id symlinks for persistent memory (bsc#1140631)


author: fbui@suse.com
changelog:
  - Add 0001-core-coldplug-possible-nop_job.patch
    This likely fixes bsc#1139459 but it's not been confirmed
    yet. That's the reason why it's been put in the quarantine area so
    we can mark this patch as a fix once it will be verified before
    merging it in our git repo. See https://github.com/systemd/systemd/pull/13124
    for a reproducer and the fix.
    In any cases it fixes a real bug that could be easily reproduced and
    the fix verified.


author: fbui@suse.com
changelog:
  - Import commit 95970c97e7dd4c9da6ae8874a52a4cb7c3a426ea
    a782cfc3dd udev: fix NULL deref when executing rules (bsc#1151506)
    5d57ebcfaa udevd: don't use monitor after manager_exit()
    0b0d5d7f7f udevd: capitalize log messages in on_sigchld()
    0aa611f786 udevd: merge conditions to decrease indentation
    67c5cf4216 Revert "udevd: fix crash when workers time out after exit is signal caught"
    7ae4a18fac core: fragments of masked units ought not be considered for NeedDaemonReload (#7060) (bsc#1156482)
    7f96a07c40 gitignore: ignore all build* subdirs in main directory
    7c7b26d7d4 udevd: fix crash when workers time out after exit is signal caught
    1dcfdb7eb9 udevd: wait for workers to finish when exiting (bsc#1106383)
    ca38549687 fs-util: let's avoid unnecessary strerror()
    da764bdbcc fs-util: introduce inotify_add_watch_and_warn() helper
    e16fb04e35 ask-password: improve log message when inotify limit is reached (bsc#1155574)
    a97b60bfd9 man: mention that alias names are only effective after 'systemctl enable' (bsc#1151377)


author: fbui@suse.com
changelog:
  - Import commit 1cbd71fe1742b9d2867d2e42aa72988e8ac96184
    975b34c470 fileio: introduce read_full_virtual_file() for reading virtual files in sysfs, procfs (bsc#1133495 bsc#1159814)
    7ce363e63e fileio: initialize errno to zero before we do fread()
    b95ee81e20 fileio: try to read one byte too much in read_full_stream()
    d5592a5309 fileio: fix MIN/MAX mixup (#3896)
    e117ec63eb fileio: fix read_full_stream() bugs (#3887)
    a45453cac3 journal: include kmsg lines from the systemd process which exec()d us (#8078)


author: fbui@suse.com
changelog:
  - Fix bsc#1162108 CVE-2020-1712
    Add 0001-polkit-on-async-pk-requests-re-validate-action-detai.patch
    Add 0002-sd-bus-introduce-API-for-re-enqueuing-incoming-messa.patch
    Add 0003-polkit-when-authorizing-via-PK-let-s-re-resolve-call.patch


author: fbui@suse.com
changelog:
  - Drop 0001-polkit-on-async-pk-requests-re-validate-action-detai.patch
  - Drop 0002-sd-bus-introduce-API-for-re-enqueuing-incoming-messa.patch
  - Drop 0003-polkit-when-authorizing-via-PK-let-s-re-resolve-call.patch
    They have been merged into SUSE/v228 branch.


author: fbui@suse.com
changelog:
  - Import commit 267d4cc2cbc16df95068ac4dce3e6139775789ff
    43a4acb4b1 polkit: when authorizing via PK let's re-resolve callback/userdata instead of caching it (bsc#1162108 CVE-2020-1712)
    487b55d9a7 sd-bus: introduce API for re-enqueuing incoming messages
    e78cf56f96 polkit: on async pk requests, re-validate action/details
    1511d91c77 udev: rename the persistent link for ATA devices (bsc#1164538)
    44e2109109 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
    bac663a15b tmpfiles: remove unnecessary assert (bsc#1171145)
    34b1c7dcab pid1: by default make user units inherit their umask from the user manager (bsc#1162698)
    6287606ede manager: fix job mode when signalled to shutdown etc (bsc#1161262)
    9d042086d9 coredump: fix bug that loses core dump files when core dumps are compressed and disk space is low. (bsc#1167622)
    bb1c2c4501 udev: inform systemd how many workers we can potentially spawn (#4036) (bsc#1165633)
    5c90354cfe libblkid: open device in nonblock mode. (bsc#1084671)
    416a540c52 udev/cdrom_id: Do not open CD-rom in exclusive mode. (bsc#1154256)
    0bd95e41da bus_open leak sd_event_source when udevadm trigger。 (bsc#1161436 CVE-2019-20386)


author: trenn@suse.de
changelog:
  - Do not start mcelog service based on an udev (/dev/mcelog) rule
    (bsc#976781), but enable it automatically at install time.


author: ohering@suse.de
changelog:
  - enable xencommons (bnc#897352, bnc#1012842)
    xendomains must be enabled manually by the local admin (bnc#937371)


author: fbui@suse.com
changelog:
  - Enable by default uuidd shipped by util-linux (bsc#1012850)
    util-linux was previously shipping a preset file enabling uuidd by
    default. This is now done here as other packages are not supposed to
    ship their own preset rules.
    Also increase the package version so util-linux can conflict with
    the previous versions and hence will be updated *after* the new
    version of the presets package is. This is important otherwise if
    util-linux removed its preset file first, then the presets package
    would believe a new change in the presets and you enable again
    uuidd.


author: sbrabec@suse.com
changelog:
  - Bump version to 12.2 to make version numbers consistent between
    SLE and Leap (boo#1029775).
  - Remove superfluous uuidd.service. uuidd.socket is sufficient
    (bsc#1012850#c8).


author: sschricker@suse.com
changelog:
  - enable nvmefc-boot-connections.service to discover
    network-provided nvme drives on boot (bsc#1128428)


author: idonmez@suse.com
changelog:
  - Update to version 1.2.8
    * Add new inflateGetDictionary() function
    * Fix bug where gzopen() immediately followed by gzclose()
      would write an empty file instead of an empty gzip stream.
    * Fix bug in gzclose() when gzwrite() runs out of memory


author: tchvatal@suse.com
changelog:
  - Remove zlib-devel-static, nothing should use libz.a anyway.
  - Package minizip library, everything using it should now pull
    minizip-devel and unbundle it bnc#935864


author: tchvatal@suse.com
changelog:
  - Include fixes for bnc#1003580 bnc#1003579 bnc#1003577 bnc#1013882:
    * zlib-bnc1003577.patch
    * zlib-bnc1003579-part2.patch
    * zlib-bnc1003579.patch
    * zlib-bnc1003580.patch refreshed
    * zlib-bnc1013882.patch CVE-2016-9843


author: tchvatal@suse.com
changelog:
  - Add patch to safeguard against negative values in uInt bsc#1071321:
    * 0001-Do-not-try-to-store-negative-values-in-unsigned-int.patch


