# changelog

author: schwab@suse.de
changelog:
  - riscv-no-relax.patch: RISC-V: Don't generate branch/jump relocation if
    symbol is local when no-relax


author: matz@suse.com
changelog:
  - Update to version 2.43:
    * new .base64 pseudo-op, allowing base64 encoded data as strings
    * Intel APX: add support for CFCMOV, CCMP, CTEST, zero-upper, NF
      (APX_F now fully supported)
    * x86 Intel syntax now warns about more mnemonic suffixes
    * macros and .irp/.irpc/.rept bodies can use \+ to get at number
      of times the macro/body was executed
    * aarch64: support 'armv9.5-a' for -march, add support for LUT
      and LUT2
    * s390: base register operand in D(X,B) and D(L,B) can now be
      omitted (ala 'D(X,)'); warn when register type doesn't match
      operand type (use option
      'warn-regtype-mismatch=[strict|relaxed|no]' to adjust)
    * riscv: support various extensions: Zacas, Zcmp, Zfbfmin,
      Zvfbfmin, Zvfbfwma, Smcsrind/Sscsrind, XCvMem, XCvBi, XCvElw,
      XSfCease, all at version 1.0;
      remove support for assembly of privileged spec 1.9.1 (linking
      support remains)
    * arm: remove support for some old co-processors: Maverick and FPA
    * mips: '--trap' now causes either trap or breakpoint instructions
      to be emitted as per current ISA, instead of always using trap
      insn and failing when current ISA was incompatible with that
    * LoongArch: accept .option pseudo-op for fine-grained control
      of assembly code options; add support for DT_RELR
    * readelf: now displays RELR relocations in full detail;
      add -j/--display-section to show just those section(s) content
      according to their type
    * objdump/readelf now dump also .eh_frame_hdr (when present) when
      dumping .eh_frame
    * gprofng: add event types for AMD Zen3/Zen4 and Intel Ice Lake
      processors; add minimal support for riscv
    * linker:
    - put .got and .got.plt into relro segment
    - add -z isa-level-report=[none|all|needed|used] to the x86 ELF
      linker to report needed and used x86-64 ISA levels
    - add --rosegment option which changes the -z separate-code
      option so that only one read-only segment is created (instead
      of two)
    - add --section-ordering-file <FILE> option to add extra
      mapping of input sections to output sections
    - add -plugin-save-temps to store plugin intermediate files
      permanently
  - Removed binutils-2.42.tar.bz2, binutils-2.42-branch.diff.gz.
  - Added binutils-2.43.tar.bz2, binutils-2.43-branch.diff.gz.
  - Removed upstream patch riscv-no-relax.patch.
  - Rebased ld-relro.diff and binutils-revert-rela.diff.


author: matz@suse.com
changelog:
  - Update to current 2.43.1 branch [PED-10474]:
    * PR32109 - fuzzing problem
    * PR32083 - LTO vs overridden common symbols
    * PR32067 - crash with LTO-plugin and --oformat=binary
    * PR31956 - LTO vs wrapper symbols
    * riscv - add Zimop and Zcmop extensions
  - Adjusted binutils-2.43-branch.diff.gz.


author: jslaby@suse.cz
changelog:
  - drop ld-relro.diff (relro is the default for some time)
    and it warns on avr spuriously (bsc#1233520)


author: matz@suse.com
changelog:
  - Update to current 2.43.1 branch [PED-10254, PED-10306]:
    * s390 - Add arch15 instructions
    * various fixes from upstream: PR32153, PR32171, PR32189,
      PR32196, PR32191, PR32109, PR32372, PR32387
  - Adjusted binutils-2.43-branch.diff.gz.
  - Disable zstd-by-default again (needs adjustments in at least
    golang,llvm15,llvm17 first)
  - Add binutils-fix-branch.diff.
  - Check non-changing of flex/bison inputs only after applying
    branch and fix-branch diffs.


author: rguenther@suse.com
changelog:
  - Remove README in empty packages only required for SLE11 and older.
  - Remove now empty %build section.


author: rguenther@suse.com
changelog:
  - Guard gcc-devel so it is only built on Tumbleweed.
  - Remove bogus link to versioned g++.info file which doesn't exist.
    Instead refer to gcc.info from the g++ info directory entry.
    [bnc#922419]


author: rguenther@suse.com
changelog:
  - Add gccgo symlink, add go and gofmt as alternatives to support
    parallel install of golang.  [bnc#1096677]


author: rguenther@suse.com
changelog:
  - With gcc-PIE add -pie even when -fPIC is specified but we are
    not linking a shared library.  [boo#1185348]
  - Fix postun of gcc-go alternative.


author: dimstar@opensuse.org
changelog:
  - Add _multibuild to define 2nd spec file as additional flavor.
    Eliminates the need for source package links in OBS.


author: schwab@suse.de
changelog:
  - Disable multilib and go on riscv64
  - libgcc-riscv-div.patch: Backport of r12-5799-g45116f342057b7 to fix
    build with current binutils


author: rguenther@suse.com
changelog:
  - Add gcc7-aarch64-bsc1214052.patch to fix -fstack-protector issues
    with variable length stack allocations on aarch64.
    Fixes CVE-2023-4039.  [bsc#1214052]
  - Add gcc7-aarch64-untyped_call.patch to fix issue with __builtin_apply
  - Add gcc7-lra-elim.patch to fix internal compiler error when forming
    paired loads and stores on aarch64.


author: rguenther@suse.com
changelog:
  - Add gcc7-bsc1216488.patch to avoid creating recursive DIE references
    through DW_AT_abstract_origin when using LTO.  [bsc#1216488]


author: rguenther@suse.com
changelog:
  - Add gcc7-pr88345-min-func-alignment.diff to add support for
    - fmin-function-alignment.  [bsc#1214934]


author: pmonreal@suse.com
changelog:
  - Update to version 20210213.5c710c0: [bsc#1180938]
    * setup_directories(): perform safer creation of directories
    * save_config(): avoid re-opening output file for each iteration
    * save_config(): break after first match to avoid unnecessary stat() calls
    * CryptoPolicy.parse(): actually stop parsing line on syntax error
    * ProfileConfig.parse_string(): correctly extended subpolicies
    * Exclude RC4 from LEGACY
    * Introduce rc4_md5_in_krb5 to narrow AD_SUPPORT
    * code style: fix 'not in' membership testing
    * pylintrc: tighten up a bit
    * formatting: avoid long lines
    * formatting: use f-strings instead of format()
    * formatting: reformat all python code with autopep8
    * nss: postponing the version check again, to 3.61
    * Revert "Unfortunately we have to keep ignoring the openssh check for sk-"


author: pmonreal@suse.com
changelog:
  - Disable DTLS0.9 protocol in GnuTLS DEFAULT policy. [bsc#1180938]
    * The minimum DTLS protocol version in the DEFAULT and FUTURE
      policies is DTLS1.2.
    * Fixed upstream: 05203d21f6d0ea9bbdb351e4600f1e273720bb8e


author: pmonreal@suse.com
changelog:
  - Update to version 20210225.05203d2:
    * Disable DTLS0.9 protocol in the DEFAULT policy.
    * policies/FIPS: insignificant reformatting
    * policygenerators/libssh: respect ssh_certs
    * policies/modules/OSPP: tighten to follow RHEL 8
    * crypto-policies(7): drop not-reenableable comment
    * follow up on disabling RC4


author: pmonreal@suse.com
changelog:
  - Update to version 20210917.c9d86d1:
    * openssl: fix disabling ChaCha20
    * pacify pylint 2.11: use format strings
    * pacify pylint 2.11: specify explicit encoding
    * fix minor things found by new pylint
    * update-crypto-policies: --check against regenerated
    * update-crypto-policies: fix --check's walking order
    * policygenerators/gnutls: revert disabling DTLS0.9...
    * policygenerators/java: add javasystem backend
    * LEGACY: bump 1023 key size to 1024
    * cryptopolicies: fix 'and' in deprecation warnings
    * *ssh: condition ecdh-sha2-nistp384 on SECP384R1
    * nss: hopefully the last fix for nss sigalgs check
    * cryptopolicies: Python 3.10 compatibility
    * nss: postponing check + testing at least something
    * Rename 'policy modules' to 'subpolicies'
    * validation.rules: fix a missing word in error
    * cryptopolicies: raise errors right after warnings
    * update-crypto-policies: capitalize warnings
    * cryptopolicies: syntax-precheck scope errors
    * .gitlab-ci.yml, Makefile: enable codespell
    * all: fix several typos
    * docs: don't leave zero TLS/DTLS protocols on
    * openssl: separate TLS/DTLS MinProtocol/MaxProtocol
    * alg_lists: order protocols new-to-old for consistency
    * alg_lists: max_{d,}tls_version
    * update-crypto-policies: fix pregenerated + local.d
    * openssh: allow validation with pre-8.5
    * .gitlab-ci.yml: run commit-range against upstream
    * openssh: Use the new name for PubkeyAcceptedKeyTypes
    * sha1_in_dnssec: deprecate
    * .gitlab-ci.yml: test commit ranges
    * FIPS:OSPP: sign = -*-SHA2-224
    * scoped policies: documentation update
    * scoped policies: use new features to the fullest...
    * scoped policies: rewrite + minimal policy changes
    * scoped policies: rewrite preparations
    * nss: postponing the version check again, to 3.64
  - Remove patches fixed upstream: crypto-policies-typos.patch
  - Rebase: crypto-policies-test_supported_modules_only.patch
  - Merge crypto-policies-asciidoc.patch into
      crypto-policies-no-build-manpages.patch


author: pmonreal@suse.com
changelog:
  - Remove the scripts and documentation regarding
    fips-finish-install and test-fips-setup
    * Add crypto-policies-FIPS.patch


author: pmonreal@suse.com
changelog:
  - Update the update-crypto-policies(8) man pages and README.SUSE
    to mention the supported back-end policies. [bsc#1209998]


author: pmonreal@suse.com
changelog:
  - FIPS: Enable to set the kernel FIPS mode with fips-mode-setup
    and fips-finish-install commands, add also the man pages.
    * Adapt the fips-mode-setup script for SLE [jsc#PED-5041]
    * Rebase crypto-policies-FIPS.patch
    * Simplify the man pages creation:
    - Rebase crypto-policies-no-build-manpages.patch
    - Add crypto-policies-asciidoc.patch


author: pmonreal@suse.com
changelog:
  - FIPS: Adapt the fips-mode-setup script to use the pbl command
    from the perl-Bootloader package to replace grubby. Add a note
    for transactional systems. Ship the man 8 pages for
    fips-mode-setup and fips-finish-install [jsc#PED-5041].
    * Rebase crypto-policies-FIPS.patch


author: pmonreal@suse.com
changelog:
  - Make the supported versions change in the update-crypto-policies(8)
    man page persistent [bsc#1209998].
    * Add patch crypto-policies-supported.patch
    * Rebase patches:
    - crypto-policies-asciidoc.patch
    - crypto-policies-no-build-manpages.patch


author: jengelh@inai.de
changelog:
  - Update to release 1.21
    * Handle DWARF5 DW_OP_addrx and
      subprogram ret type with abstract_origin properly.


author: msuchanek@suse.com
changelog:
  - Handle zero sized per-cpu veriables in Linux BTF.
    + btf_encoder-fix-and-complete-filtering-out-zero-sized-per-CPU-variables.patch


author: msuchanek@suse.com
changelog:
  - Update to version 1.21+git175.1ef87b2 (jsc#SLE-17288):
    * libbpf: bump dependency to >= 0.4.0
    * CMakeLists.txt: Enable SHARED and STATIC lib creation
    * libbpf: Allow to use packaged version
    * btfdiff: Support diffing DWARF vs detached BTF
    * pahole: Allow encoding BTF into a detached file
    * pahole: Add --kabi_prefix flag
    * btf_encoder: fix and complete filtering out zero-sized per-CPU variables
    * btf: Remove ftrace filter
    * pahole: Introduce --with_flexible_array option to show just types ending in a flexible array
    * Many updates to btf_encoder and bug fixes
  - Remove upstreamed patches
    - btf_encoder-fix-and-complete-filtering-out-zero-sized-per-CPU-variables.patch
    - remove-ftrace-filter.patch
  - Pretend version 1.22 to make kernel happy
    + dwarves-Prep-1.22.patch


author: msuchanek@suse.com
changelog:
  - 15.4 has new elfutils, drop libebl-plugins dependency.
  - Update to version 1.21+git177.1ef87b2:
    * Fix crash with split BTF debuginfo
    * CMakeList.txt: Bump version to the upcoming 1.22 release, not out of the door yet
    - Remove upstreamed patch dwarves-Prep-1.22.patch


author: jengelh@inai.de
changelog:
  - Update to release 1.22 (bsc#1190340).
    * Ability to encode BTF to a separate file
    * Multithreaded DWARF loading
    * Details at https://marc.info/?l=dwarves&m=162975403628056&w=2


author: schwab@suse.de
changelog:
  - iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
    writes when writing escape sequence (CVE-2024-2961, bsc#1222992)


author: giuliano.belinassi@suse.com
changelog:
  - glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
    nscd: Stack-based buffer overflow in netgroup cache
    (CVE-2024-33599, bsc#1223423, BZ #31677)
  - glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
    nscd: Avoid null pointer crashes after notfound response
    (CVE-2024-33600, bsc#1223424, BZ #31678)
  - glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
    nscd: Do not send missing not-found response in addgetnetgrentX
    (CVE-2024-33600, bsc#1223424, BZ #31678)
  - glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
    netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
    CVE-2024-33602, bsc#1223425, BZ #31680)


author: giuliano.belinassi@suse.com
changelog:
  - ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
    for _start routine (bsc#1221940)


author: schwab@suse.de
changelog:
  - nscd-netgroup-cache-timeout.patch: Use time_t for return type of
    addgetnetgrentX (CVE-2024-33602, bsc#1223425)


author: schwab@suse.de
changelog:
  - tcache-thread-shutdown.patch: malloc: Initiate tcache shutdown even
    without allocations (bsc#1228661, BZ #28028)


author: schwab@suse.de
changelog:
  - assert-message-allocation.patch: Fix underallocation of abort_msg_s
    struct (CVE-2025-0395, bsc#1236282, BZ #32582))


author: schwab@suse.de
changelog:
  - static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
    debug env var for setuid for static (CVE-2025-4802, bsc#1243317)


author: astieger@suse.com
changelog:
  - gzip 1.10:
    * Compressed gzip output no longer contains the current time as
      a timestamp when the input is not a regular file.  Instead, the
      output contains a null (zero) timestamp.  This makes gzip's
      behavior more reproducible when used as part of a pipeline.
    * A use of uninitialized memory on some malformed inputs has been
      fixed.
    * A few theoretical race conditions in signal handers have been
      fixed.
  - drop upstreamed patches:
    * gnulib-libio.patch
    * gzip-1.8-deprecate_netstat.patch


author: kstreitova@suse.com
changelog:
  - add gzip-1.10-ibm_dfltcc_support.patch [jsc#SLE-5818] [jsc#SLE-8914]
    * it adds support for DFLTCC (hardware-accelerated deflation)
      for s390x arch
    * enable it via "--enable-dfltcc" option


author: kstreitova@suse.com
changelog:
  - refresh gzip-1.10-ibm_dfltcc_support.patch to fix three data
    corruption issues [bsc#1145276] [jsc#SLE-5818] [jsc#SLE-8914]


author: kstreitova@suse.com
changelog:
  - Enable DFLTCC compression for s390x for levels 1-6 (i. e. to make
    it used by default) by adding -DDFLTCC_LEVEL_MASK=0x7e to CLFAGS.
    [jsc#SLE-13775]


author: pgajdos@suse.com
changelog:
  - fix DFLTCC segfault [bsc#1177047]
  - added patches
    fix https://git.savannah.gnu.org/cgit/gzip.git/commit/?id=be0a534ba2b6e77da289de8da79e70843b1028cc
    + gzip-1.10-fix-DFLTCC-segfault.patch


author: danilo.spinella@suse.com
changelog:
  - Fix escaping of malicious filenames (CVE-2022-1271 bsc#1198062)
    * bsc1198062.patch
    * bsc1198062-2.patch


author: shung-hsi.yu@suse.com
changelog:
  - arm64: proton-pack: Expose whether the platform is mitigated
    by firmware (bsc#1242778).
  - arm64: insn: Add support for encoding DSB (bsc#1242778).
  - commit 03c0bf2


author: shung-hsi.yu@suse.com
changelog:
  - arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs
    (bsc#1242778).
  - commit d70f026


author: shung-hsi.yu@suse.com
changelog:
  - arm64: bpf: Only mitigate cBPF programs loaded by unprivileged
    users (bsc#1242778).
  - commit 60765a9


author: shung-hsi.yu@suse.com
changelog:
  - arm64: proton-pack: Add new CPUs 'k' values for branch
    mitigation (bsc#1242778).
  - commit 288ec51


author: joao.povoas@suse.com
changelog:
  - Update
    patches.suse/0001-netfs-Fix-missing-xas_retry-calls-in-xarray-iteratio.patch
    (bsc#1213946 CVE-2022-49810 bsc#1242489).
  - Update
    patches.suse/0037-dm-ioctl-fix-misbehavior-if-list_versions-races-with-module-loading.patch
    (git-fixes CVE-2022-49771 bsc#1242686).
  - Update
    patches.suse/ACPI-APEI-Fix-integer-overflow-in-ghes_estatus_pool_.patch
    (git-fixes CVE-2022-49885 bsc#1242735).
  - Update
    patches.suse/ALSA-hda-fix-potential-memleak-in-add_widget_node.patch
    (git-fixes CVE-2022-49835 bsc#1242385).
  - Update
    patches.suse/ALSA-usb-audio-Drop-snd_BUG_ON-from-snd_usbmidi_outp.patch
    (git-fixes CVE-2022-49772 bsc#1242147).
  - Update
    patches.suse/ASoC-core-Fix-use-after-free-in-snd_soc_exit.patch
    (git-fixes CVE-2022-49842 bsc#1242484).
  - Update
    patches.suse/Bluetooth-L2CAP-Fix-memory-leak-in-vhci_write.patch
    (CVE-2022-3619 bsc#1204569 CVE-2022-49908 bsc#1242157).
  - Update
    patches.suse/Bluetooth-L2CAP-Fix-use-after-free-caused-by-l2cap_r.patch
    (CVE-2022-3564 bsc#1206073 CVE-2022-49910 bsc#1242452).
  - Update
    patches.suse/Bluetooth-L2CAP-fix-use-after-free-in-l2cap_conn_del.patch
    (CVE-2022-3640 bsc#1204619 CVE-2022-49909 bsc#1242453).
  - Update
    patches.suse/Bluetooth-btsdio-fix-use-after-free-bug-in-btsdio_re-73f7b171b7c0.patch
    (git-fixes CVE-2023-53145 bsc#1243047).
  - Update
    patches.suse/HID-intel-ish-hid-ipc-Fix-potential-use-after-free-i.patch
    (git-fixes CVE-2023-53039 bsc#1242745).
  - Update
    patches.suse/IB-hfi1-Correctly-move-list-in-sc_disable.patch
    (git-fixes CVE-2022-49931 bsc#1242382).
  - Update
    patches.suse/Input-i8042-fix-leaking-of-platform-device-on-module.patch
    (git-fixes CVE-2022-49777 bsc#1242232).
  - Update
    patches.suse/Input-iforce-invert-valid-length-check-when-fetching.patch
    (git-fixes CVE-2022-49790 bsc#1242387).
  - Update
    patches.suse/PCI-s390-Fix-use-after-free-of-PCI-resources-with-pe.patch
    (git-fixes CVE-2023-53123 bsc#1242403).
  - Update
    patches.suse/RDMA-core-Fix-null-ptr-deref-in-ib_core_cleanup.patch
    (git-fixes CVE-2022-49925 bsc#1242371).
  - Update patches.suse/SUNRPC-Fix-a-server-shutdown-leak.patch
    (git-fixes CVE-2023-53131 bsc#1242377).
  - Update
    patches.suse/SUNRPC-Fix-null-ptr-deref-when-xps-sysfs-alloc-faile.patch
    (git-fixes CVE-2022-49928 bsc#1242369).
  - Update patches.suse/arm64-entry-avoid-kprobe-recursion.patch
    (git-fixes CVE-2022-49888 bsc#1242458).
  - Update
    patches.suse/ata-libata-transport-fix-double-ata_host_put-in-ata_.patch
    (git-fixes CVE-2022-49826 bsc#1242549).
  - Update
    patches.suse/ata-libata-transport-fix-error-handling-in-ata_tdev_.patch
    (git-fixes CVE-2022-49823 bsc#1242545).
  - Update
    patches.suse/ata-libata-transport-fix-error-handling-in-ata_tlink.patch
    (git-fixes CVE-2022-49824 bsc#1242547).
  - Update
    patches.suse/ata-libata-transport-fix-error-handling-in-ata_tport.patch
    (git-fixes CVE-2022-49825 bsc#1242548).
  - Update
    patches.suse/bnxt_en-Avoid-order-5-memory-allocation-for-TPA-data.patch
    (jsc#SLE-18978 CVE-2023-53134 bsc#1242380).
  - Update
    patches.suse/bnxt_en-Fix-possible-crash-in-bnxt_hwrm_set_coal.patch
    (git-fixes CVE-2022-49869 bsc#1242158).
  - Update
    patches.suse/bridge-switchdev-Fix-memory-leaks-when-changing-VLAN.patch
    (git-fixes CVE-2022-49812 bsc#1242151).
  - Update
    patches.suse/ca8210-fix-mac_len-negative-array-access.patch
    (git-fixes CVE-2023-53040 bsc#1242746).
  - Update
    patches.suse/can-af_can-fix-NULL-pointer-dereference-in-can_rx_re.patch
    (git-fixes CVE-2022-49863 bsc#1242169).
  - Update
    patches.suse/can-j1939-j1939_send_one-fix-missing-CAN-header-init.patch
    (git-fixes CVE-2022-49845 bsc#1243133).
  - Update
    patches.suse/capabilities-fix-potential-memleak-on-error-path-fro.patch
    (git-fixes CVE-2022-49890 bsc#1242469).
  - Update
    patches.suse/capabilities-fix-undefined-behavior-in-bit-shift-for.patch
    (git-fixes CVE-2022-49870 bsc#1242551).
  - Update
    patches.suse/ceph-avoid-putting-the-realm-twice-when-decoding-snaps-fails.patch
    (bsc#1206051 CVE-2022-49770 bsc#1242597).
  - Update
    patches.suse/cifs-Fix-connections-leak-when-tlink-setup-failed.patch
    (git-fixes CVE-2022-49822 bsc#1242544).
  - Update
    patches.suse/cifs-fix-use-after-free-bug-in-refresh_cache_worker-.patch
    (bsc#1193629 CVE-2023-53052 bsc#1242749).
  - Update
    patches.suse/dmaengine-mv_xor_v2-Fix-a-resource-leak-in-mv_xor_v2.patch
    (git-fixes CVE-2022-49861 bsc#1242580).
  - Update
    patches.suse/dmaengine-ti-k3-udma-glue-fix-memory-leak-when-regis.patch
    (git-fixes CVE-2022-49860 bsc#1242586).
  - Update
    patches.suse/drm-Fix-potential-null-ptr-deref-in-drm_vblank_destr.patch
    (git-fixes CVE-2022-49827 bsc#1242689).
  - Update
    patches.suse/drm-amd-display-fix-shift-out-of-bounds-in-Calculate.patch
    (git-fixes CVE-2023-53077 bsc#1242752).
  - Update
    patches.suse/drm-amdkfd-Fix-NULL-pointer-dereference-in-svm_migra.patch
    (git-fixes CVE-2022-49864 bsc#1242685).
  - Update
    patches.suse/drm-amdkfd-Fix-an-illegal-memory-access.patch
    (git-fixes CVE-2023-53090 bsc#1242753).
  - Update
    patches.suse/drm-drv-Fix-potential-memory-leak-in-drm_dev_init.patch
    (git-fixes CVE-2022-49830 bsc#1242150).
  - Update
    patches.suse/drm-i915-active-Fix-misuse-of-non-idle-barriers-as-f.patch
    (git-fixes CVE-2023-53087 bsc#1242280).
  - Update
    patches.suse/drm-shmem-helper-Remove-another-errant-put-in-error-.patch
    (git-fixes CVE-2023-53084 bsc#1242294).
  - Update
    patches.suse/ext4-Fix-possible-corruption-when-moving-a-directory.patch
    (bsc#1210763 CVE-2023-53137 bsc#1242358).
  - Update
    patches.suse/ext4-fix-BUG_ON-when-directory-entry-has-invalid-rec.patch
    (bsc#1206886 CVE-2022-49879 bsc#1242733).
  - Update
    patches.suse/ext4-fix-WARNING-in-ext4_update_inline_data.patch
    (bsc#1213012 CVE-2023-53100 bsc#1242790).
  - Update
    patches.suse/ext4-fix-another-off-by-one-fsmap-error-on-1k-block-.patch
    (bsc#1210767 CVE-2023-53143 bsc#1242276).
  - Update
    patches.suse/ext4-fix-task-hung-in-ext4_xattr_delete_inode.patch
    (bsc#1213096 CVE-2023-53089 bsc#1242744).
  - Update
    patches.suse/ext4-fix-warning-in-ext4_da_release_space.patch
    (bsc#1206887 CVE-2022-49880 bsc#1242734).
  - Update
    patches.suse/ext4-update-s_journal_inum-if-it-changes-after-journ.patch
    (bsc#1213094 CVE-2023-53091 bsc#1242767).
  - Update
    patches.suse/ext4-zero-i_disksize-when-initializing-the-bootloade.patch
    (bsc#1213013 CVE-2023-53101 bsc#1242791).
  - Update
    patches.suse/firmware-xilinx-don-t-make-a-sleepable-memory-alloca.patch
    (git-fixes CVE-2023-53099 bsc#1242399).
  - Update
    patches.suse/ftrace-Fix-invalid-address-access-in-lookup_rec-when-index-is-0.patch
    (git-fixes CVE-2023-53075 bsc#1242218).
  - Update
    patches.suse/ftrace-Fix-null-pointer-dereference-in-ftrace_add_mod.patch
    (git-fixes CVE-2022-49802 bsc#1242270).
  - Update
    patches.suse/ftrace-Fix-use-after-free-for-dynamic-ftrace_ops.patch
    (git-fixes CVE-2022-49892 bsc#1242449).
  - Update
    patches.suse/gfs2-Check-sb_bsize_shift-after-reading-superblock.patch
    (git-fixes CVE-2022-49769 bsc#1242440).
  - Update
    patches.suse/i2c-piix4-Fix-adapter-not-be-removed-in-piix4_remove.patch
    (git-fixes CVE-2022-49900 bsc#1242454).
  - Update
    patches.suse/i40e-Fix-kernel-crash-during-reboot-when-adapter-is-.patch
    (jsc#SLE-18378 CVE-2023-53114 bsc#1242398).
  - Update patches.suse/iavf-fix-hang-on-reboot-with-ice.patch
    (jsc#SLE-18385 CVE-2023-53064 bsc#1242222).
  - Update patches.suse/ibmvnic-Free-rwi-on-reset-success.patch
    (bsc#1184350 ltc#191533 git-fixes CVE-2022-49906 bsc#1242464).
  - Update
    patches.suse/ice-copy-last-block-omitted-in-ice_get_module_eeprom.patch
    (git-fixes CVE-2023-53142 bsc#1242282).
  - Update
    patches.suse/igb-revert-rtnl_lock-that-causes-deadlock.patch
    (jsc#SLE-18379 CVE-2023-53060 bsc#1242241).
  - Update
    patches.suse/iio-adc-at91_adc-fix-possible-memory-leak-in-at91_ad.patch
    (git-fixes CVE-2022-49794 bsc#1242392).
  - Update
    patches.suse/iio-adc-mp2629-fix-potential-array-out-of-bound-acce.patch
    (git-fixes CVE-2022-49792 bsc#1242389).
  - Update
    patches.suse/iio-trigger-sysfs-fix-possible-memory-leak-in-iio_sy.patch
    (git-fixes CVE-2022-49793 bsc#1242391).
  - Update
    patches.suse/interconnect-exynos-fix-node-leak-in-probe-PM-QoS-er.patch
    (git-fixes CVE-2023-53092 bsc#1242415).
  - Update
    patches.suse/interconnect-fix-mem-leak-when-freeing-nodes.patch
    (git-fixes CVE-2023-53096 bsc#1242289).
  - Update
    patches.suse/ipv6-addrlabel-fix-infoleak-when-sending-struct-ifad.patch
    (git-fixes CVE-2022-49865 bsc#1242570).
  - Update
    patches.suse/kprobes-Skip-clearing-aggrprobe-s-post_handler-in-kprobe-on-ftrace-case.patch
    (git-fixes CVE-2022-49779 bsc#1242261).
  - Update patches.suse/loop-Fix-use-after-free-issues.patch
    (bsc#1214991 CVE-2023-53111 bsc#1242428).
  - Update
    patches.suse/mISDN-fix-misuse-of-put_device-in-mISDN_register_dev.patch
    (git-fixes CVE-2022-49818 bsc#1242527).
  - Update
    patches.suse/mISDN-fix-possible-memory-leak-in-mISDN_dsp_element_.patch
    (git-fixes CVE-2022-49821 bsc#1242542).
  - Update
    patches.suse/mISDN-fix-possible-memory-leak-in-mISDN_register_dev.patch
    (git-fixes CVE-2022-49915 bsc#1242409).
  - Update
    patches.suse/macvlan-enforce-a-consistent-minimal-mtu.patch
    (git-fixes CVE-2022-49776 bsc#1242248).
  - Update
    patches.suse/media-meson-vdec-fix-possible-refcount-leak-in-vdec_.patch
    (git-fixes CVE-2022-49887 bsc#1242736).
  - Update
    patches.suse/media-rc-gpio-ir-recv-add-remove-function.patch
    (git-fixes CVE-2023-53098 bsc#1242779).
  - Update
    patches.suse/misc-vmw_vmci-fix-an-infoleak-in-vmci_host_do_receiv.patch
    (git-fixes CVE-2022-49788 bsc#1242353).
  - Update
    patches.suse/mmc-sdhci-pci-Fix-possible-memory-leak-caused-by-mis.patch
    (git-fixes CVE-2022-49787 bsc#1242352).
  - Update
    patches.suse/msft-hv-2675-HID-hyperv-fix-possible-memory-leak-in-mousevsc_prob.patch
    (git-fixes CVE-2022-49874 bsc#1242478).
  - Update patches.suse/net-ena-Fix-error-handling-in-ena_init.patch
    (git-fixes CVE-2022-49813 bsc#1242497).
  - Update patches.suse/net-iucv-Fix-size-of-interrupt-data.patch
    (bsc#1211465 git-fixes CVE-2023-53108 bsc#1242422).
  - Update
    patches.suse/net-macvlan-fix-memory-leaks-of-macvlan_common_newli.patch
    (git-fixes CVE-2022-49853 bsc#1242688).
  - Update
    patches.suse/net-mlx5-E-Switch-Fix-an-Oops-in-error-handling-code.patch
    (jsc#SLE-19253 CVE-2023-53058 bsc#1242237).
  - Update patches.suse/net-mlx5-Fix-steering-rules-cleanup.patch
    (jsc#SLE-19253 CVE-2023-53079 bsc#1242765).
  - Update
    patches.suse/net-smc-Fix-possible-leaked-pernet-namespace-in-smc_init
    (git-fixes CVE-2022-49905 bsc#1242467).
  - Update
    patches.suse/net-tun-Fix-memory-leaks-of-napi_get_frags.patch
    (git-fixes CVE-2022-49871 bsc#1242558).
  - Update
    patches.suse/net-usb-lan78xx-Limit-packet-length-to-skb-len.patch
    (git-fixes CVE-2023-53068 bsc#1242239).
  - Update
    patches.suse/net-usb-smsc75xx-Limit-packet-length-to-skb-len.patch
    (git-fixes CVE-2023-53125 bsc#1242285).
  - Update
    patches.suse/net-usb-smsc95xx-Limit-packet-length-to-skb-len.patch
    (git-fixes CVE-2023-53062 bsc#1242228).
  - Update
    patches.suse/net-x25-Fix-skb-leak-in-x25_lapb_receive_frame.patch
    (git-fixes CVE-2022-49809 bsc#1242402).
  - Update
    patches.suse/nfc-fdp-Fix-potential-memory-leak-in-fdp_nci_send.patch
    (git-fixes CVE-2022-49924 bsc#1242426).
  - Update
    patches.suse/nfc-fdp-add-null-check-of-devm_kmalloc_array-in-fdp_.patch
    (git-fixes CVE-2023-53139 bsc#1242361).
  - Update
    patches.suse/nfc-nfcmrvl-Fix-potential-memory-leak-in-nfcmrvl_i2c.patch
    (git-fixes CVE-2022-49922 bsc#1242378).
  - Update
    patches.suse/nfc-nxp-nci-Fix-potential-memory-leak-in-nxp_nci_sen.patch
    (git-fixes CVE-2022-49923 bsc#1242394).
  - Update
    patches.suse/nfc-pn533-initialize-struct-pn533_out_arg-properly.patch
    (git-fixes CVE-2023-53119 bsc#1242370).
  - Update
    patches.suse/nfc-st-nci-Fix-use-after-free-bug-in-ndlc_remove-due.patch
    (git-fixes bsc#1210337 CVE-2023-1990 CVE-2023-53106
    bsc#1242215).
  - Update
    patches.suse/nfs4-Fix-kmemleak-when-allocate-slot-failed.patch
    (git-fixes CVE-2022-49927 bsc#1242416).
  - Update
    patches.suse/nilfs2-fix-deadlock-in-nilfs_count_free_blocks.patch
    (git-fixes CVE-2022-49850 bsc#1242164).
  - Update
    patches.suse/nilfs2-fix-kernel-infoleak-in-nilfs_ioctl_wrap_copy.patch
    (git-fixes CVE-2023-53035 bsc#1242739).
  - Update
    patches.suse/nilfs2-fix-use-after-free-bug-of-ns_writer-on-remoun.patch
    (git-fixes CVE-2022-49834 bsc#1242695).
  - Update
    patches.suse/nvmet-avoid-potential-UAF-in-nvmet_req_complete.patch
    (git-fixes CVE-2023-53116 bsc#1242411).
  - Update
    patches.suse/nvmet-fix-a-memory-leak-in-nvmet_auth_set_key.patch
    (git-fixes CVE-2022-49807 bsc#1242357).
  - Update
    patches.suse/ocfs2-fix-data-corruption-after-failed-write.patch
    (bsc#1208542 CVE-2023-53081 bsc#1242281).
  - Update
    patches.suse/octeontx2-pf-Fix-SQE-threshold-checking.patch
    (jsc#SLE-24682 CVE-2022-49858 bsc#1242589).
  - Update
    patches.suse/perf-core-Fix-perf_output_begin-parameter-is-incorrectly-invoked-in-perf_event_bpf_output.patch
    (git fixes CVE-2023-53065 bsc#1242229).
  - Update
    patches.suse/phy-ralink-mt7621-pci-add-sentinel-to-quirks-table.patch
    (git-fixes CVE-2022-49868 bsc#1242550).
  - Update
    patches.suse/pinctrl-devicetree-fix-null-pointer-dereferencing-in.patch
    (git-fixes CVE-2022-49832 bsc#1242154).
  - Update
    patches.suse/platform-chrome-cros_ec_chardev-fix-kernel-data-leak.patch
    (git-fixes CVE-2023-53059 bsc#1242230).
  - Update
    patches.suse/qed-qed_sriov-guard-against-NULL-derefs-from-qed_iov.patch
    (jsc#SLE-19001 CVE-2023-53066 bsc#1242227).
  - Update
    patches.suse/ring-buffer-Check-for-NULL-cpu_buffer-in-ring_buffer.patch
    (bsc#1204705 CVE-2022-49889 bsc#1242455).
  - Update
    patches.suse/rose-Fix-NULL-pointer-dereference-in-rose_send_frame.patch
    (git-fixes CVE-2022-49916 bsc#1242421).
  - Update
    patches.suse/scsi-core-Remove-the-proc-scsi-proc_name-directory-earlier.patch
    (git-fixes CVE-2023-53140 bsc#1242372).
  - Update
    patches.suse/scsi-lpfc-Check-kzalloc-in-lpfc_sli4_cgn_params_read.patch
    (git-fixes CVE-2023-53038 bsc#1242743).
  - Update
    patches.suse/scsi-mpt3sas-Fix-NULL-pointer-access-in-mpt3sas_transport_port_add.patch
    (git-fixes CVE-2023-53124 bsc#1242165).
  - Update
    patches.suse/scsi-qla2xxx-Perform-lockless-command-completion-in-abort-path.patch
    (git-fixes CVE-2023-53041 bsc#1242747).
  - Update
    patches.suse/scsi-qla2xxx-Synchronize-the-IOCB-count-to-be-in-ord.patch
    (bsc#1209292 bsc#1209684 bsc#1209556 CVE-2023-53056
    bsc#1242219).
  - Update
    patches.suse/scsi-scsi_dh_alua-Fix-memleak-for-qdata-in-alua_activate.patch
    (git-fixes CVE-2023-53078 bsc#1242231).
  - Update
    patches.suse/scsi-scsi_transport_sas-Fix-error-handling-in-sas_phy_add.patch
    (git-fixes CVE-2022-49839 bsc#1242443).
  - Update
    patches.suse/scsi-zfcp-Fix-double-free-of-FSF-request-when-qdio-send-fails
    (git-fixes CVE-2022-49789 bsc#1242366).
  - Update
    patches.suse/serial-imx-Add-missing-.thaw_noirq-hook.patch
    (git-fixes CVE-2022-49841 bsc#1242473).
  - Update
    patches.suse/siox-fix-possible-memory-leak-in-siox_device_add.patch
    (git-fixes CVE-2022-49836 bsc#1242355).
  - Update
    patches.suse/tracing-Do-not-let-histogram-values-have-some-modifiers.patch
    (git-fixes CVE-2023-53093 bsc#1242279).
  - Update
    patches.suse/tracing-Fix-memory-leak-in-test_gen_synth_cmd-and-test_empty_synth_event.patch
    (git-fixes CVE-2022-49800 bsc#1242265).
  - Update
    patches.suse/tracing-Fix-memory-leak-in-tracing_read_pipe.patch
    (git-fixes CVE-2022-49801 bsc#1242338).
  - Update
    patches.suse/tracing-Fix-wild-memory-access-in-register_synth_event.patch
    (git-fixes CVE-2022-49799 bsc#1242264).
  - Update
    patches.suse/tracing-kprobe-Fix-memory-leak-in-test_gen_kprobe-kretprobe_cmd.patch
    (git-fixes CVE-2022-49891 bsc#1242456).
  - Update
    patches.suse/tracing-kprobe-Fix-potential-null-ptr-deref-on-trace_array-in-kprobe_event_gen_test_exit.patch
    (git-fixes CVE-2022-49796 bsc#1242305).
  - Update
    patches.suse/tracing-kprobe-Fix-potential-null-ptr-deref-on-trace_event_file-in-kprobe_event_gen_test_exit.patch
    (git-fixes CVE-2022-49797 bsc#1242320).
  - Update
    patches.suse/udf-Fix-a-slab-out-of-bounds-write-bug-in-udf_find_e.patch
    (bsc#1206649 CVE-2022-49846 bsc#1242716).
  - Update
    patches.suse/usb-dwc2-fix-a-devres-leak-in-hw_enable-upon-suspend.patch
    (git-fixes CVE-2023-53054 bsc#1242226).
  - Update
    patches.suse/usb-gadget-u_audio-don-t-let-userspace-block-driver-.patch
    (git-fixes CVE-2023-53045 bsc#1242756).
  - Update
    patches.suse/usb-ucsi-Fix-NULL-pointer-deref-in-ucsi_connector_ch.patch
    (git-fixes CVE-2023-53049 bsc#1242244).
  - Update
    patches.suse/wifi-cfg80211-fix-memory-leak-in-query_regdb_file.patch
    (git-fixes CVE-2022-49881 bsc#1242481).
  - Update
    patches.suse/x86-fpu-Drop-fpregs-lock-before-inheriting-FPU-permissions.patch
    (bnc#1205282 CVE-2022-49783 bsc#1242312).
  - commit b466a4e


author: joao.povoas@suse.com
changelog:
  - Update
    patches.suse/0519-drm-amd-display-Fix-optc2_configure-warning-on-dcn31.patch
    (jsc#PED-1166 jsc#PED-1168 jsc#PED-1170 jsc#PED-1218
    jsc#PED-1220 jsc#PED-1222 jsc#PED-1223 jsc#PED-1225 jsc#PED-2849
    CVE-2022-49773 bsc#1242311).
  - Update
    patches.suse/ACPI-PPTT-Fix-to-avoid-sleep-in-the-atomic-context-w.patch
    (git-fixes CVE-2023-53070 bsc#1242286).
  - Update patches.suse/Bluetooth-HCI-Fix-global-out-of-bounds.patch
    (git-fixes bsc#1209780 CVE-2023-28866 CVE-2023-53057
    bsc#1242240).
  - Update patches.suse/RDMA-rxe-Fix-mr-leak-in-RESPST_ERR_RNR.patch
    (jsc#PED-1111 CVE-2022-49929 bsc#1242360).
  - Update
    patches.suse/blk-cgroup-properly-pin-the-parent-in-blkcg_css_online.patch
    (bsc#1208105 CVE-2022-49786 bsc#1242351).
  - Update
    patches.suse/blk-mq-Fix-kmemleak-in-blk_mq_init_allocated_queue-943f.patch
    (git-fixes CVE-2022-49901 bsc#1242448).
  - Update
    patches.suse/block-Fix-possible-memory-leak-for-rq_wb-on-add_disk-failure-fa81.patch
    (git-fixes CVE-2022-49902 bsc#1242465).
  - Update
    patches.suse/bpf-Fix-memory-leaks-in-__check_func_call.patch
    (bsc#1225903 CVE-2022-49837 bsc#1242160).
  - Update
    patches.suse/dm-stats-check-for-and-propagate-alloc_percpu-failur-d3aa.patch
    (git-fixes CVE-2023-53044 bsc#1242759).
  - Update
    patches.suse/drm-amd-display-Do-not-set-DRR-on-pipe-Commit.patch
    (bsc#1206843 CVE-2023-53042 bsc#1242748).
  - Update
    patches.suse/drm-amdgpu-Fix-call-trace-warning-and-hang-when-remo.patch
    (bsc#1206843 CVE-2023-53036 bsc#1242740).
  - Update
    patches.suse/drm-amdgpu-fix-ttm_bo-calltrace-warning-in-psp_hw_fi.patch
    (bsc#1206843 CVE-2023-53074 bsc#1242751).
  - Update
    patches.suse/drm-i915-sseu-fix-max_subslices-array-index-out-of-b.patch
    (git-fixes CVE-2023-53112 bsc#1242410).
  - Update patches.suse/drm-ttm-Fix-a-NULL-pointer-dereference.patch
    (git-fixes CVE-2023-53095 bsc#1242278).
  - Update
    patches.suse/ice-xsk-disable-txq-irq-before-flushing-hw.patch
    (jsc#PED-376 CVE-2023-53102 bsc#1242393).
  - Update
    patches.suse/ipvs-fix-WARNING-in-__ip_vs_cleanup_batch.patch
    (bsc#1207361 CVE-2022-49918 bsc#1242425).
  - Update
    patches.suse/ipvs-fix-WARNING-in-ip_vs_app_net_cleanup.patch
    (bsc#1207361 CVE-2022-49917 bsc#1242406).
  - Update
    patches.suse/net-mlx5e-Fix-cleanup-null-ptr-deref-on-encap-lock.patch
    (jsc#PED-1549 CVE-2023-53105 bsc#1242400).
  - Update
    patches.suse/net-sched-Fix-use-after-free-in-red_enqueue.patch
    (bsc#1207361 CVE-2022-49921 bsc#1242359).
  - Update
    patches.suse/net-tunnels-annotate-lockless-accesses-to-dev-needed_headroom.patch
    (CVE-2024-26804 bsc#1222629 CVE-2023-53109 bsc#1242405).
  - Update
    patches.suse/ntfs-check-overflow-when-iterating-ATTR_RECORDs.patch
    (git-fixes CVE-2022-49762 bsc#1242146).
  - Update
    patches.suse/ntfs-fix-use-after-free-in-ntfs_attr_find.patch
    (git-fixes CVE-2022-49763 bsc#1242249).
  - Update
    patches.suse/perf-x86-amd-Fix-crash-due-to-race-between-amd_pmu_enable_all-perf-NMI-and-throttling.patch
    (git fixes CVE-2022-49781 bsc#1242302).
  - Update
    patches.suse/perf-x86-amd-core-Always-clear-status-for-idx.patch
    (bsc#1213233 CVE-2023-53073 bsc#1242224).
  - Update
    patches.suse/perf-x86-amd-uncore-Fix-memory-leak-for-events-array.patch
    (git fixes CVE-2022-49784 bsc#1242349).
  - Update
    patches.suse/rethook-fix-a-potential-memleak-in-rethook_alloc.patch
    (git-fixes CVE-2022-49795 bsc#1242298).
  - Update
    patches.suse/scsi-mpi3mr-Fix-throttle_groups-memory-leak.patch
    (git-fixes CVE-2023-53128 bsc#1242381).
  - Update
    patches.suse/vp_vdpa-fix-the-crash-in-hot-unplug-with-vp_vdpa.patch
    (git-fixes CVE-2023-53082 bsc#1242295).
  - Update
    patches.suse/wifi-mt76-do-not-run-mt76_unregister_device-on-unreg.patch
    (bsc#1209980 CVE-2023-53071 bsc#1242217).
  - Update
    patches.suse/x86-tdx-Panic-on-bad-configs-that-VE-on-private-memo.patch
    (jsc#PED-342 CVE-2022-49886 bsc#1242474).
  - commit 3794a99


author: pfalcato@suse.de
changelog:
  - x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc()
    (CVE-2024-28956 bsc#1242006).
  - commit 5c23caf


author: jslaby@suse.cz
changelog:
  - Fix grub's requoted kernel parameters (bsc#1181111)
    * 0001-libkmod-config-revamp-kcmdline-parsing-into-a-state-.patch
    * 0002-libkmod-config-re-quote-option-from-kernel-cmdline.patch


author: jengelh@inai.de
changelog:
  - Update to release 29
    * Fix `modinfo -F` not working for built-in modules and
      certain fields.
    * Fix a memory leak, overflow and double free on error path.
  - Drop 0001-Fix-modinfo-F-always-shows-name-for-built-ins.patch,
    0001-libkmod-config-revamp-kcmdline-parsing-into-a-state-.patch,
    0002-libkmod-config-re-quote-option-from-kernel-cmdline.patch
    (all merged)


author: msuchanek@suse.de
changelog:
  - /usr/lib should override /lib where both are available. Support /usr/lib for
    depmod.d as well.
    * Refresh usr-lib-modprobe.patch
  - Remove test patches included in release 29
    - kmod-populate-modules-Use-more-bash-more-quotes.patch
    - kmod-testsuite-compress-modules-if-feature-is-enabled.patch
    - kmod-also-test-xz-compression.patch


author: msuchanek@suse.de
changelog:
  - Display module information even for modules built into the running kernel
    (bsc#1189537).
    + libkmod-Provide-info-even-for-modules-built-into-the.patch


author: msuchanek@suse.com
changelog:
  - Use docbook 4 rather than docbook 5 for building man pages (bsc#1190190).
    * Refres no-stylesheet-download.patch


author: msuchanek@suse.com
changelog:
  - Enable ZSTD on 15.3 as well (boo#1192104).
  - Only test ZSTD in testsuite on releases where it is available.


author: rguenther@suse.com
changelog:
  - Add gcc13-pr101523.patch to avoid combine spending too much
    compile-time and memory doing nothing on s390x.  [boo#1188441]


author: rguenther@suse.com
changelog:
  - Update to trunk head, 109f1b28fc94c93096506e3df0c25e331, git9885
  - Package Modula-2 info files.
  - Install/Remove Modula-2 and D info files.


author: rguenther@suse.com
changelog:
  - Update to gcc-14 branch head, 272e8c90af527fc1d0055ad0f, git10335
    * picks first batch of post-release fixes


author: rguenther@suse.com
changelog:
  - Update to GCC 14.2.0 release, c035a7c30c310ff928988cbcf, git10526
  - Add libquadmath0-devel-gcc14 sub-package to allow installing
    quadmath.h and SO link without installing the fortran frontend
  - Drop SLE11 compatibility %selfconflict wrapper, drop various
    conditions gating SLE11 build support


author: tchvatal@suse.com
changelog:
  - Reflect SUSE CFLAGS
  - Do not bother with obscpio if we are fetching direct releases
  - Remove patch 0001-makefile-Fix-install-target.patch seems
    to build/install without it just fine
  - Update to 0.0.6:
    + New features
    - new extensible bpf_object__open_{file,mem} APIs and
      DECLARE_LIBBPF_OPTS() macro to go with them
    - bpf_helpers.h, bpf_endian.h, and bpf_tracing.h are now
      distributed with libbpf
    - BPF CO-RE: added field size, field existence, and bitfield
      relocation support
    - BPF CO-RE: BPF_CORE_READ(), bpf_core_field_exists(),
      bpf_core_field_size() and other BPF CO-RE related helpers
      available through bpf_core_read.h header
    - bpf_object__open() API now auto-detects program type from
      its section name
    - BPF_PROG_TRACING programs support (incuding BTF-typed raw
      tracepoints, fentry/fexit programs)
    - mmap() support for BPF global variables
    - declarative map pinning support added
    - probe_read_{user,kernel}[_str]() BPF helpers added
    - bpf_get_link_xdp_info() function to get more XDP information
      added
    - a bunch of other AF_XDP changes
    + Usability improvements
    - no need for int version SEC('version') = 1; anymore
    - raw_tp/tp and uprobe/uretprobe section prefixes added
    - new bpf_program__get_{type,expected_attach_type} getters
    - preserve error code on program load failure
    + Fixes
    - btf_dump padding handling
    - bpf_object__name() returning name, not path
    - ELF section handling off-by-one bug fix
    - mem leak/double free fix in BPF program relocation code


author: mrostecki@opensuse.org
changelog:
  - Build libbpf from kernel sources, not from github sources, for
    consistency with bpftool package.


author: msuchanek@suse.com
changelog:
  - libbpf is now a separate project, stop building from the kernel
    (bsc#1188419 jsc#SLE-17288 jsc#SLE-18805).
  - Fix LIBSUBDIR
    + libdir.patch


author: shung-hsi.yu@suse.com
changelog:
  - Update to 0.5.0:
    + New features and user-space APIs:
    - libbpf_set_strict_mode() allowing to opt-in into backwards incompatible libbpf-1.0 changes. See "Libbpf: the road to 1.0" and "Libbpf 1.0 migration guide" for more details.
    - streamlined error reporting for low-level APIs, high-level error-returning APIs, and pointer-returning APIs (as a libbpf-1.0 opt-in);
    - "Light" BPF skeleton support;
    - BPF_PROG_TYPE_SYSCALL support;
    - BPF perf link support for kprobe, uprobe, tracepoint, and perf_event BPF programs;
    - BPF cookie support for kprobe, uprobe, tracepoint, and perf_event BPF programs through bpf_program__attach_[ku]probe_opts() APIs;
    - allow to specify ref_ctr_off for USDT semaphores through bpf_program__attach_uprobe_opts() API;
    - btf_custom_path support in bpf_object_open_opts, allowing to specify custom BTF for CO-RE relocations;
    - sk_reuseport/migrate program type support;
    - btf_dump__dump_type_data() API, allowing to dump binary data according to BTF type description;
    - btf__load_into_kernel() and btf__load_from_kernel_by_id(), and split BTF variants of them;
    - btf__load_vmlinux_btf() and btf__load_module_btf() APIs;
    - bpf_map__initial_value() API to get initial value of mmap-ed BPF maps;
    - bpf_map_lookup_and_delete_elem_flags() API.
    + BPF-side APIs and features:
    - support for weak typed __ksym externs;
    - BPF timer helpers: bpf_timer_init(), bpf_timer_set_callback(), bpf_timer_start(), bpf_timer_cancel();
    - bpf_get_attach_cookie() helper to get BPF cookie from BPF program side;
    - bpf_get_func_ip() helper;
    - bpf_sys_bpf() helper;
    - bpf_task_pt_regs() helper;
    - bpf_btf_find_by_name_kind() helper;
    - usability improvements for bpf_tracing.h when target architecture is missing.
    + Bug fixes and compatibility improvements:
    - improve BPF support detection on old Red Hat kernels with backported BPF patches;
    - improvements for LTO builds with GCC 10+;
    - pass NLM_F_EXCL when creating TC qdisc;
    - better support of BPF map reuse on old kernels;
    - fix the bug resulting in sometimes closing FD 0, which wasn't created and owned by libbpf itself.
  - Remove patches merged upstream
    + libdir.patch
    + libbpf-Fix-build-with-latest-gcc-binutils-with-LTO.patch


author: shung-hsi.yu@suse.com
changelog:
  - Fix use-after-free in btf_dump_name_dups (boo#1204391 CVE-2022-3534)
    + libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
  - Fix null pointer dereference in find_prog_by_sec_insn() (boo#1204502 CVE-2022-3606)
    + libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch


author: shung-hsi.yu@suse.com
changelog:
  - Fix null pointer dereference in bpf_object__collect_prog_relos()
    (bsc#1221101)
    * Add libbpf-Fix-NULL-pointer-dereference-in-bpf_object__c.patch


author: schwab@suse.de
changelog:
  - Update to version 4.4.10
    * Fix alignment problem for GOST 34.11 (Streebog) in gost-yestcrypt.
    * The crypt_* functions will now all fail and set errno to ERANGE if
      their 'phrase' argument is longer than CRYPT_MAX_PASSPHRASE_SIZE
      characters (this is currently 512)
    * The NT hashing method no longer truncates passphrases at 128
      characters; Windows does not do this.
  - format-overflow.patch: remove


author: schwab@suse.de
changelog:
  - Update to version 4.4.11
    * Fixes for GCC v10.x
    * Change how the known-answer tests are parallelized
  - gcc10.patch: remove


author: schwab@suse.de
changelog:
  - Update to version 4.4.15
    * The compatibility symbols crypt_gensalt_r, xcrypt, xcrypt_r,
      xcrypt_gensalt, and xcrypt_gensalt_r are deprecated further
    * Speed up ka-sunmd5 by skipping most of the test phrases
  - Package README.md and TODO.md (bsc#1165389)


author: pgajdos@suse.com
changelog:
  - fix variable name for datamember in 'struct crypt_data' [bsc#1215496]
  - added patches
    fix https://github.com/besser82/libxcrypt/commit/b212d601549a0fc84cbbcaf21b931f903787d7e2
    + libxcrypt-man-fix-variable-name.patch


author: mliska@suse.cz
changelog:
  - Update to version 0.183:
    debuginfod: New thread-busy metric and more detailed error metrics.
      New --fdcache-mintmp and tracking of filesystem freespace.
      New increased webapi concurrency while grooming.
    debuginfod-client: DEBUGINFOD_SONAME macro added to debuginfod.h which
      can be used to dlopen the libdebuginfod.so library.
      New function debuginfod_set_verbose_fd and
      DEBUGINFOD_VERBOSE environment variable.
    config: profile.sh and profile.csh won't export DEBUGINFOD_URLS unless
      configured --enable-debuginfod-urls[=URLS]
    elflint, readelf: Recognize SHF_GNU_RETAIN.
      Handle SHT_X86_64_UNWIND as valid relocation target.
  - Remove config-do-not-define-DEBUGINFOD_URLS-environment-var.patch patch.


author: mliska@suse.cz
changelog:
  - Add disable-run-readelf-self-test.patch in order to disable
    a failing test-case with GCC 11 (PR27367).


author: mliska@suse.cz
changelog:
  - Update to version 0.184:
    debuginfod: Use libarchive's bsdtar as the .deb-family file unpacker.
    debuginfod-client: Client caches negative results. If a query for a
      file failed with 404, an empty 000 permission
      file is created in the cache. This will prevent
      requesting the same file for the next 10 minutes.
      Client objects now carry long-lived curl handles
      for outgoing connections.  This makes it more
      efficient for multiple sequential queries, because
      the TCP connections and/or TLS state info are kept
      around awhile, avoiding O(100ms) setup latencies.
    libdw: handle DW_FORM_indirect when reading attributes
    translations: Update Polish translation.


author: mliska@suse.cz
changelog:
  - Update to version 0.185:
    debuginfod-client: Simplify curl handle reuse so downloads which
      return an error are retried.
    elfcompress: Always exit with code 0 when the operation succeeds (even
      when nothing was done). On error the exit code is now always 1.


author: jcheung@suse.com
changelog:
  - For version 0.185, the below patches are no longer needed
    (jsc#SLE-17288, jsc#SLE-17951)
    libdw-check-end-of-attributes-list-consistently.patch
    elflint-dont-check-section-group-without-flags-word.patch
    libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
    libdw-readelf-make-sure-there-is-enough-data-to-read.patch
    elfutils-dont-trust-sh_entsize.patch
    elflint-check-symbol-table-data-is-big-enough-before-check.patch
    size-handle-recursive-elf-ar-files.patch
    elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
    use-the-empty-string-for-note-names-with-zero-size.patch
    readelf-fix-off-by-one-sanity-check.patch
    libebl-check-NT_PLATFORM-core-notes.patch
    libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
    libelf-check-compression-before-allocate-output-buffer.patch
    libdwfl-sanity-check-partial-core-file-data-reads.patch
    arlib-check-that-sh_entsize-isnt-zero.patch


author: martin.liska@suse.com
changelog:
  - Enhance license fields: all the libraries actually have a different
    license to the tools. While the tools are GPL-3.0-or-later, the
    libraries are (LGPL-3.0-or-later OR GPL-2.0-or-later)
    SLE bug (for tracking the above) bsc#1191310


author: rguenther@suse.com
changelog:
  - Update to ISL version 0.12.2
    * isl_int has been replaced by isl_val
    * some of the old functions are still available in isl/deprecated/*.h
    but they will be removed in the future
    * The functions isl_pw_qpolynomial_eval, isl_union_pw_qpolynomial_eval,
    isl_pw_qpolynomial_fold_eval and isl_union_pw_qpolynomial_fold_eval have
    been changed to return an isl_val instead of an isl_qpolynomial
  - Remove obsolete config-guess-sub-update.diff patch


author: rguenther@suse.com
changelog:
  - Update to ISL version 0.14
    * support IMath as an optional replacement for GMP
    * minor AST generator improvements
  - Inherits changes from ISL version 0.13
    * deprecate isl_int
    * improved support for multi piecewise quasi-affine expressions
    * allow the user to impose a bound on the number of low-level operations
    * add isl_id_to_ast_expr and isl_id_to_pw_aff
    * add isl_schedule_constraints
    * hide internal structure of isl_vec
    * remove support for piplib
  - Add isl-0.14-fixes.patch to fix function returning without value.


author: rguenther@suse.com
changelog:
  - Update to ISL version 0.15
    * improve coalescing
    * add isl_union_access_info_compute_flow
    * add mark nodes in AST
    * add isl_union_pw_aff and isl_multi_union_pw_aff
    * add schedule trees
    * deprecate band forests
    * deprecate separation_class AST generation option
    * introduce isl_bool and isl_stat types
  - Removes no longer needed isl-0.14-fixes.patch.


author: mpluskal@suse.com
changelog:
  - Update to 0.16.1
    * fix bug in simplification
  - Changes for 0.16
    * add 32 bit integer optimization for IMath
    * minor AST generator improvements
    * add isl_union_flow_get_full_{may,must}_dependence
    * minor improvements to Python bindings
    * minor improvements to set and map printing


author: rguenther@suse.com
changelog:
  - Update to 0.18
    * improve elimination of redundant existentially quantified variables
    * improve coalescing
    * improve parametric integer programming
    * preserve isolate option in isl_schedule_node_band_split
    * print AST nodes in YAML format
    * minor improvements to Python bindings
  - Inherits update to 0.17.1
    * fix bug in coalescing treatment
  - Inherits update to 0.17
    * optionally combine SCCs incrementally in scheduler
    * optionally maximize coincidence in scheduler
    * optionally avoid loop coalescing in scheduler
    * fix handling of nested integer divisions
    * optionally detect min/max expressions during AST generation
    * minor AST generator improvements
    * simplify stride constraints
    * improve support for expansions in schedule trees


author: meissner@suse.com
changelog:
  - updated to 3.4.0
    * enhancement: add API call jent_set_fips_failure_callback as requested by Daniel Ojalvo
    * fix: Change the SHA-3 integration: The entropy pool is now a SHA-3 state.
    It is filled with the time delta containing entropy and auxiliary data that does not contain entropy using a SHA update operation. The auxiliary data is calculated by a SHA-3 hashing of some varying state data. The time delta that contains entropy is measured about the SHA-3 hasing of the auxiliary data. This satisfies FIPS 140-3 IG D.K resolutions 4, 6, and 8.
    * enhancement: add CMake support by Andrew Hopkins
  - updated to 3.3.1
    * fix: bug fix in initialization logic by Vladis Dronov <vdronov@redhat.com>
    * fix: use __asm__ instead of asm to suit the C11 standard
  - added a -devel-static package to be able to link it static.


author: meissner@suse.com
changelog:
  - updated to 3.4.1
    * add FIPS 140 hints to man page
    * simplify the test tool to search for optimal configurations
    * fix: jent_loop_shuffle: re-add setting the time that was lost with 3.4.0
    * enhancement: add ARM64 assembler code to read high-res timer


author: meissner@suse.com
changelog:
  - jitterentropy-split-internal-header.patch:
    Hide the non-GNUC constructs that are library internal from the
    exported header. (bsc#1202870)


author: pmonreal@suse.com
changelog:
  - Fix a stack corruption on s390x: [bsc#1209627]
    * Output size of the STCKE command on s390x is 16 bytes, compared
      to 8 bytes of the STCK command. Fix a stack corruption in the
      s390x version of jent_get_nstime(). Add some more detailed
      information on the STCKE command.
    * github.com/smuellerDD/jitterentropy-library/commit/7bf9f85
    * Add jitterentropy-fix-a-stack-corruption-on-s390x.patch


author: rguenther@suse.com
changelog:
  - Update to version 1.0.
    - Bump SONAME to libmpc3
    - License change: LGPLv3+ for code, GFDLv1.3+ (with no invariant sections)
      for documentation
    - Functions renamed:
      mpc_mul_2exp to mpc_mul_2ui, mpc_div_2exp to mpc_div_2ui
    - New functions: mpc_log10, mpc_mul_2si, mpc_div_2si
    - Speed-ups:
    - mpc_fma
    - Bug fixes:
    - mpc_div and mpc_norm now return a value indicating the effective
      rounding direction, as the other functions
    - mpc_mul, mpc_sqr and mpc_norm now return correct results even if there
      are over- or underflows during the computation
    - mpc_asin, mpc_proj, mpc_sqr: Wrong result when input variable has
      infinite part and equals output variable is corrected
    - mpc_fr_sub: Wrong return value for imaginary part is corrected
  - Skips version 0.9:
    - New functions:
    - mpc_set_dc, mpc_set_ldc, mpc_get_dc, mpc_get_ldc for converting
      between mpc type variables and C variables of type double _Complex
      or long double _Complex
    - mpc_sin_cos, computing simultaneously the sine and cosine
    - Speed-ups:
    - mpc_pow_si through binary exponentiation
    - mpc_pow_z when the exponent fits in a long
    - mpc_tan through the use of mpc_sin_cos
    - Bug fixes:
    - trigonometric functions: infinite loop due to overflow for large
      arguments
    - mpc_exp: close to infinite loop for argument close to 0
    - mpc_sqrt: close to infinite loop for argument close to 1
    - mpc_add_si: replaced macro by function, since the macro evaluated the
      same expression twice


author: rguenther@suse.com
changelog:
  - Update to version 1.0.2.
    - Fixed mpc_atan, mpc_atanh for (+-0, +-1)
    - Fixed mpc_log10 for purely imaginary argument
    - Fixed case of intermediate zero real or imaginary part in mpc_fma


author: mpluskal@suse.com
changelog:
  - Add gpg signature
  - Add info scriplet dependencies and move them to correct sections
  - Cleanup spec file with spec-cleaner


author: rguenther@suse.com
changelog:
  - Update to version 1.1.0.
    - Compatible with mpfr 4.0.0, obsoletes mpc-1.0.3-addsubulp.diff
      and mpc-1.0.3-fmma.diff.
    - New functions mpc_cmp_abs and mpc_rootofunity
    - Rewrite of the testing framework
    - New mpcbench tool, used with make bench
    - Fixed handling of over- and underflows with directed rounding in
      the "other direction" for mpc_cos, mpc_sin, mpc_exp and mpc_pow
    - Fixed a bug in mpc_atan(0,y) with |y| near 1
  - Adjust URLs to tarball and signature.


author: rguenther@suse.com
changelog:
  - Add mpfr-3.1.5-p9.patch with cummulative patches to patchlevel p9,
    obsoletes mpfr-3.1.5-p8.patch.


author: rguenther@suse.com
changelog:
  - Update to mpfr 4.0.0
    * The "dinde aux marrons" release.
    * MPFR now depends on GMP 5.0+ instead of 4.1+.
    * API change:
      Applications that call GMP's mp_set_memory_functions function to change
      the allocators must first call the new function mpfr_mp_memory_cleanup
      in all threads where MPFR is potentially used; this new function is
      currently equivalent to mpfr_free_cache.
      The reason is that the way memory allocation is done by MPFR has changed
      (again), so that the current GMP allocators are used (since for some
      applications, the old allocators may become invalid).
      Note: Freeing the caches like this might have a performance impact on some
      particular applications; if this is an issue, this could be handled for a
      future MPFR version.
    * Mini-gmp support via the --enable-mini-gmp configure option (experimental).
    * The minimum precision MPFR_PREC_MIN is now 1, with rounding defined as
      in the errata of IEEE 754-2008 and in the following IEEE 754 revision
      (ties rounded away from zero).
    * Shared caches for multithreaded applications.
      New function mpfr_free_cache2.
    * Partial support of MPFR_RNDF (faithful rounding).
    * New functions: mpfr_fpif_export and mpfr_fpif_import to export and import
      numbers in a floating-point interchange format, independent both on the
      number of bits per word and on the endianness.
    * New function mpfr_fmodquo to return the low bits of the quotient
      corresponding to mpfr_fmod.
    * New functions mpfr_flags_clear, mpfr_flags_set, mpfr_flags_test,
      mpfr_flags_save and mpfr_flags_restore to operate on groups of flags.
    * New functions mpfr_set_float128 and mpfr_get_float128 to convert from/to
      the __float128 type (requires --enable-float128 and compiler support).
    * New functions mpfr_buildopt_float128_p and mpfr_buildopt_sharedcache_p.
    * New functions mpfr_rint_roundeven and mpfr_roundeven, completing the
      other similar round-to-integer functions for rounding to nearest with
      the even-rounding rule.
    * New macro mpfr_round_nearest_away to add partial emulation of the
      rounding to nearest-away (as defined in IEEE 754-2008).
    * New functions mpfr_nrandom and mpfr_erandom to generate random numbers
      following normal and exponential distributions respectively.
    * New functions mpfr_fmma and mpfr_fmms to compute a*b+c*d and a*b-c*d.
    * New function mpfr_rootn_ui, similar to mpfr_root, but agreeing with the
      rootn function of the IEEE 754-2008 standard.
    * New functions mpfr_log_ui to compute the logarithm of an integer,
      mpfr_gamma_inc for the incomplete Gamma function.
    * New function mpfr_beta for the Beta function (incomplete, experimental).
    * New function mpfr_get_q to convert a floating-point number into rational.
    * The mpfr_dump function is now described in the manual; its output format
      has slightly changed.
    * The mpfr_eint function now returns the value of the E1/eint1 function
      for negative argument.
    * The behavior of the mpfr_set_exp function changed, as it could easily
      yield undefined behavior in some cases (this modifies both the API and
      the ABI).
    * In function mpfr_urandom, the next random state no longer depends on the
      current exponent range and the rounding mode. The exceptions due to the
      rounding of the random number are now correctly generated, following the
      uniform distribution.
    * Functions mpfr_grandom and mpfr_root are deprecated and will be removed
      in a future release.
    * Complete rewrite of function mpfr_sum, which now works in all cases (the
      old one could take all the memory and/or crash with inputs of different
      magnitudes in case of huge cancellation or table maker's dilemma). The
      sign of an exact zero result is now specified, and the return value is
      now the usual ternary value. Note that the position of "const" in the
      mpfr_sum prototype has been fixed (the manual was correct); user code
      should not be affected.
    * Old, deprecated macros mpfr_add_one_ulp and mpfr_sub_one_ulp removed.
      The mpfr_next* functions should be used instead.
    * Internally, improved caching: a minimum of 10% increase of the precision
      is guaranteed to avoid too many recomputations.
    * Added internal small-precision mpz_t pool, which aims to avoid the
      overhead of memory allocation, in particular.
      New function mpfr_free_pool.
    * Added configure option --enable-assert=none to avoid checking any assertion.
    * The --enable-decimal-float configure option no longer requires
    - -with-gmp-build, and support for decimal floats is now automatically
      detected by default (similarly for support for __float128).
    * Updated tuning parameters.
    * Better support for Automake 1.13+ (now used to generate the tarball).
    * Dropped K&R C compatibility.
    * Improved MPFR manual.
    * New MPFRbench program (see the tools/bench directory).
    * Major speedup in mpfr_add, mpfr_sub, mpfr_mul, mpfr_div and mpfr_sqrt when
      all operands have the same precision and this precision is less than twice
      the number of bits per word, e.g., less than 128 on a 64-bit computer.
    * Speedup by a factor of almost 2 in the double <--> mpfr conversions
      (mpfr_set_d and mpfr_get_d).
    * Speedup in mpfr_log1p and mpfr_atanh for small arguments.
    * Speedup in the mpfr_const_euler function (contributed by Fredrik Johansson),
      in the computation of Bernoulli numbers (used in mpfr_gamma, mpfr_li2,
      mpfr_digamma, mpfr_lngamma and mpfr_lgamma), in mpfr_div, in mpfr_fma
      and mpfr_fms.
    * Test coverage: 96.3% lines of code.
    * Bug fixes. In particular: a speed improvement when the --enable-assert
      or --enable-assert=full configure option is used with GCC; mpfr_get_str
      now sets the NaN flag on NaN input and the inexact flag when the conversion
      is inexact. For a full list, see http://www.mpfr.org/mpfr-3.1.6/#fixed
      and the same section for any previous 3.1.x version (follow the links
      in the "Changes..." sections).
    * Microsoft Windows: Added support for thread-safe DLL (shared library).
      Tested with MinGW, ICC and MSVC.
    * Limited pkg-config support.
    * Autotools: Under Linux, make sure that the old dtags (when supported)
      are used if LD_LIBRARY_PATH is defined; otherwise "make check" would
      check an installed, compatible MPFR library found in LD_LIBRARY_PATH
      instead of the one that has been built with "make".
    * New: optional "make check-gmp-symbols", mainly for binary distributions,
      to check that MPFR does not use GMP internal symbols (experimental).


author: astieger@suse.com
changelog:
  - update to 4.0.1:
    * Improved MPFR manual
    * bug fixes, including mpfr_div_ui, mpfr_div rounding issue


author: rguenther@suse.com
changelog:
  - Add mpfr-4.0.1-cummulative-patch.patch.  Fixes
    * A subtraction of two numbers of the same sign or addition of two
      numbers of different signs can be rounded incorrectly (and the
      ternary value can be incorrect) when one of the two inputs is
      reused as the output (destination) and all these MPFR numbers
      have exactly GMP_NUMB_BITS bits of precision (typically, 32 bits
      on 32-bit machines, 64 bits on 64-bit machines).
    * The mpfr_fma and mpfr_fms functions can behave incorrectly in case
      of internal overflow or underflow.
    * The result of the mpfr_sqr function can be rounded incorrectly
      in a rare case near underflow when the destination has exactly
      GMP_NUMB_BITS bits of precision (typically, 32 bits on 32-bit
      machines, 64 bits on 64-bit machines) and the input has at most
      GMP_NUMB_BITS bits of precision.
    * The behavior and documentation of the mpfr_get_str function are
      inconsistent concerning the minimum precision (this is related to
      the change of the minimum precision from 2 to 1 in MPFR 4.0.0). The
      get_str patch fixes this issue in the following way: the value 1
      can now be provided for n (4th argument of mpfr_get_str); if n = 0,
      then the number of significant digits in the output string can now
      be 1, as already implied by the documentation (but the code was
      increasing it to 2).
    * The mpfr_cmp_q function can behave incorrectly when the rational
      (mpq_t) number has a null denominator.
    * The mpfr_inp_str and mpfr_out_str functions might behave
      incorrectly when the stream is a null pointer: the stream is
      replaced by stdin and stdout, respectively. This behavior is
      useless, not documented (thus incorrect in case a null pointer
      would have a special meaning), and not consistent with other
      input/output functions.


author: antoine.belvire@opensuse.org
changelog:
  - Fix %install_info_delete usage:
    * It has to be performed in %preun not in %postun.
    * See https://en.opensuse.org/openSUSE:Packaging_Conventions_RPM_Macros#.25install_info_delete.


author: pmonreal@suse.com
changelog:
  - Security fix: (bsc#1213853, CVE-2023-3817)
    * Fix excessive time spent checking DH q parameter value
      (bsc#1213853, CVE-2023-3817). The function DH_check() performs
      various checks on DH parameters. After fixing CVE-2023-3446 it
      was discovered that a large q parameter value can also trigger
      an overly long computation during some of these checks. A
      correct q value, if present, cannot be larger than the modulus
      p parameter, thus it is unnecessary to perform these checks if
      q is larger than p. If DH_check() is called with such q parameter
      value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
      computationally intensive checks are skipped.
    * Add openssl-1_1-CVE-2023-3817.patch


author: otto.hollmann@suse.com
changelog:
  - Displays "fips" in the version string (bsc#1215215)
    * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch


author: otto.hollmann@suse.com
changelog:
  - Security fix: [bsc#1216922, CVE-2023-5678]
    * Fix excessive time spent in DH check / generation with large Q
      parameter value.
    * Applications that use the functions DH_generate_key() to generate
      an X9.42 DH key may experience long delays. Likewise,
      applications that use DH_check_pub_key(), DH_check_pub_key_ex
      () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
      DH parameters may experience long delays. Where the key or
      parameters that are being checked have been obtained from an
      untrusted source this may lead to a Denial of Service.
    * Add openssl-CVE-2023-5678.patch


author: otto.hollmann@suse.com
changelog:
  - Security fix: [bsc#1219243, CVE-2024-0727]
    * Add NULL checks where ContentInfo data can be NULL
    * Add openssl-CVE-2024-0727.patch


author: otto.hollmann@suse.com
changelog:
  - Security fix: [bsc#1222548, CVE-2024-2511]
    * Fix unconstrained session cache growth in TLSv1.3
    * Add openssl-CVE-2024-2511.patch


author: psimons@suse.com
changelog:
  - Apply "openssl-CVE-2024-4741.patch" to fix a use-after-free
    security vulnerability. Calling the function SSL_free_buffers()
    potentially caused memory to be accessed that was previously
    freed in some situations and a malicious attacker could attempt
    to engineer a stituation where this occurs to facilitate a
    denial-of-service attack. [CVE-2024-4741, bsc#1225551]


author: pmonreal@suse.com
changelog:
  - Security fix: [bsc#1227138, CVE-2024-5535]
    * SSL_select_next_proto buffer overread
    * Add openssl-CVE-2024-5535.patch


author: pmonreal@suse.com
changelog:
  - Security fix: [bsc#1220262, CVE-2023-50782]
    * Implicit rejection in PKCS#1 v1.5
    * Add openssl-CVE-2023-50782.patch


author: angel.yankov@suse.com
changelog:
  - Security fix: [bsc#1236136, CVE-2024-13176]
    * timing side-channel in the ECDSA signature computation
    * Add openssl-CVE-2024-13176.patch


author: mcepl@cepl.eu
changelog:
  - Add CVE-2024-4032-private-IP-addrs.patch to fix bsc#1226448
    (CVE-2024-4032) rearranging definition of private v global IP
    addresses.


author: mcepl@cepl.eu
changelog:
  - Stop using %%defattr, it seems to be breaking proper executable
    attributes on /usr/bin/ scripts (bsc#1227378).


author: mcepl@cepl.eu
changelog:
  - Add CVE-2024-6923-email-hdr-inject.patch to prevent email
    header injection due to unquoted newlines (bsc#1228780,
    CVE-2024-6923).
  - Add CVE-2024-7592-quad-complex-cookies.patch fixing quadratic
    complexity in parsing cookies with backslashes (bsc#1229596,
    CVE-2024-7592)
  - %{profileopt} variable is set according to the variable
    %{do_profiling} (bsc#1227999)


author: mcepl@cepl.eu
changelog:
  - Add CVE-2024-5642-switch-off-NPN.patch switching off the NPN
    support eliminating bsc#1227233 (CVE-2024-5642).


author: mcepl@cepl.eu
changelog:
  - Add CVE-2024-6232-ReDOS-backtrack-tarfile.patch prevent
    ReDos via excessive backtracking while parsing header values
    (bsc#1230227, CVE-2024-6232).


author: mcepl@cepl.eu
changelog:
  - Add CVE-2024-9287-venv_path_unquoted.patch to properly quote
    path names provided when creating a virtual environment
    (bsc#1232241, CVE-2024-9287)


author: mcepl@cepl.eu
changelog:
  - Add CVE-2024-11168-validation-IPv6-addrs.patch
    fixing bsc#1233307 (CVE-2024-11168,
    gh#python/cpython#103848): Improper validation of IPv6 and
    IPvFuture addresses.


author: mcepl@cepl.eu
changelog:
  - Remove -IVendor/ from python-config boo#1231795
  - Fix CVE-2024-11168-validation-IPv6-addrs.patch
  - PGO run of build freezes with parallel processing, switch to -j1


author: mliska@suse.cz
changelog:
  - Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
    * Fix D memory corruption in -M output.
    * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]


author: rguenther@suse.com
changelog:
  - Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
    packages provided by older GCC work.  Add a requires from that
    package to the corresponding libstc++6 package to keep those
    at the same version.  [bsc#1196107]


author: dmueller@suse.com
changelog:
  - drop armv5tel, merge arm and armv6hl
  - use --with-cpu rather than specifying --with-arch/--with-tune


author: rguenther@suse.com
changelog:
  - Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
    * includes change to adjust gnats idea of the target, fixing
      the build of gprbuild.  [bsc#1196861]
  - Add gcc11-pr104931.patch to fix miscompile of embedded premake
    in 0ad on i586.  [bsc#1197065]


author: rguenther@suse.com
changelog:
  - Add provides/conflicts to glibc crosses since only one GCC version
    for the same target can be installed at the same time.
  - Add provides/conflicts to libgccjit.


author: rguenther@suse.com
changelog:
  - Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
    * includes gcc11-pr104931.patch
    * includes fix for Firefox ICE  [gcc#105256]


author: danilo.spinella@suse.com
changelog:
  - Fix memory corruption on deflate, bsc#1197459
    * bsc1197459.patch - CVE-2018-25032
  - Update 410.patch
    * Remove included patches:
      bsc1174551-fxi-imcomplete-raw-streams.patch
      zlib-compression-switching.patch
      zlib-s390x-z15-fix-hw-compression.patch
  - Refresh bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch


author: danilo.spinella@suse.com
changelog:
  - Update to 1.2.12:
    * A lot of bug fixes
    * Improve speed of crc32 functions
    * Use ARM crc32 instructions if the ARM architecture has them
    For the complete changes, see ChangeLog
  - Fixes CVE-2022-37434,  heap-based buffer over-read or buffer overflow in
    inflate.c via a large gzip header extra field
    (CVE-2022-37434, bsc#1202175)
  - Added patches:
    * zlib-1.2.11-covscan-issues-rhel9.patch
    * zlib-1.2.11-covscan-issues.patch
    * zlib-1.2.12-s390-vectorize-crc32.patch
    * zlib-1.2.12-optimized-crc32-power8.patch
    * zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch
    * zlib-1.2.12-fix-configure.patch
    * zlib-1.2.12-correct-inputs-provided-to-crc-func.patch
    * zlib-1.2.12-fix-CVE-2022-37434.patch
    * zlib-1.2.5-minizip-fixuncrypt.patch
  - Removed patches:
    * bsc1197459.patch (upstreamed)
    * zlib-power8-fate325307.patch
      (replaced by zlib-1.2.12-optimized-crc32-power8.patch)
    * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
      (replaced by zlib-1.2.12-IBM-Z-hw-accelrated-deflate-s390x.patch)
    * 410.patch
      (replaced by zlib-1.2.12-IBM-Z-hw-accelrated-deflate-s390x.patch)
  - Refreshed patches:
    * zlib-format.patch
    * zlib-no-version-check.patch
  - Disable profiling since it breaks tests
  - Update zlib-rpmlintrc


author: danilo.spinella@suse.com
changelog:
  - Add Power8 optimizations:
    * zlib-1.2.12-add-optimized-slide_hash-for-power.patch
    * zlib-1.2.12-add-vectorized-longest_match-for-power.patch
    * zlib-1.2.12-adler32-vector-optimizations-for-power.patch
    * zlib-1.2.12-fix-invalid-memory-access-on-ppc-and-ppc64.patch
  - Update zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch


author: danilo.spinella@suse.com
changelog:
  - Update to 1.13:
    * Fix configure issue that discarded provided CC definition
    * Correct incorrect inputs provided to the CRC functions
    * Repair prototypes and exporting of new CRC functions
    * Fix inflateBack to detect invalid input with distances too far
    * Have infback() deliver all of the available output up to any error
    * Fix a bug when getting a gzip header extra field with inflate()
    * Fix bug in block type selection when Z_FIXED used
    * Tighten deflateBound bounds
    * Remove deleted assembler code references
    * Various portability and appearance improvements
  - Added patches:
    * zlib-1.2.13-IBM-Z-hw-accelerated-deflate-s390x.patch
    * zlib-1.2.13-fix-bug-deflateBound.patch
    * zlib-1.2.13-optimized-s390.patch
  - Refreshed patches:
    * zlib-1.2.12-add-optimized-slide_hash-for-power.patch
    * zlib-1.2.12-add-vectorized-longest_match-for-power.patch
    * zlib-1.2.12-s390-vectorize-crc32.patch
  - Removed patches:
    * zlib-1.2.12-fix-configure.patch
    * zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch
    * zlib-1.2.12-optimized-crc32-power8.patch
    * zlib-1.2.12-correct-inputs-provided-to-crc-func.patch
    * zlib-1.2.12-fix-CVE-2022-37434.patch
    * zlib-1.2.11-optimized-s390.patch


author: oss@danyspin97.org
changelog:
  - Fix CVE-2023-45853, integer overflow and resultant heap-based buffer
    overflow in zipOpenNewFileInZip4_6, bsc#1216378
    * CVE-2023-45853.patch


author: msuchanek@suse.de
changelog:
  - Update from current 15 SP4 kernel
    + linux-stable-version-update.patch					(stable-5.14.11)
    + binder-fix-freeze-race.patch					(stable-5.14.9)
    + bpf-Fix-a-typo-of-reuseport-map-in-bpf.h.patch			(stable-5.14.4)
    + fq_codel-reject-silly-quantum-parameters.patch			(stable-5.14.7)
    + habanalabs-add-in-device-creation-status.patch			(stable-5.14.8)
    + serial-8250-Define-RX-trigger-levels-for-OxSemi-950-.patch		(stable-5.14.6)
    + dmanegine-idxd-add-software-command-status.patch			(jsc#SLE-18899)
    + dmaengine-idxd-fix-setting-up-priv-mode-for-dwq.patch		(jsc#SLE-18899)
    + ethtool-add-two-link-extended-substates-of-bad-signa.patch		(bsc#1190336)
    + ethtool-add-two-coalesce-attributes-for-CQE-mode.patch		(jsc#SLE-19253)
    + msft-hv-2440-hyper-v-Replace-uuid.h-with-types.h.patch		(git-fixes)
    + RDMA-mlx5-Add-DCS-offload-support.patch				(jsc#SLE-19250)
    + remove-the-lightnvm-subsystem.patch					(bsc#1190569)
    + scsi-fc-Add-EDC-ELS-definition.patch				(bsc#1190576)
    + uapi-add-a-compatibility-layer-between-linux-uio-h-and-glibc	(bsc#1053501)
    + md-display-timeout-error.patch					(bsc#763402)


author: dfaggioli@suse.com
changelog:
  - Export the macros necessary for making core-scheduling usable (bsc#1194659)
    + uapi-linux-prctl-provide-macro-definitions-for-the-PR_SCHED_CORE-type-argument


author: msuchanek@suse.com
changelog:
  - Delete RDMA-mlx5-Add-DCS-offload-support.patch (bsc#1191550)
  - Update from current 15 SP4 kernel (jsc#SLE-17360)
    * Refresh linux-stable-version-update.patch
    + kvm-sev-add-support-for-sev-intra-host-migration			(jsc#SLE-19924)
    + PCI-Add-PCI_EXP_DEVCTL_PAYLOAD_-macros.patch			(stable-5.14.19)
    + ethtool-fix-ethtool-msg-len-calculation-for-pause-st.patch		(stable-5.14.19)
    + uapi-fix-linux-nfc.h-userspace-compilation-errors.patch		(git-fixes)
    + nfc-uapi-use-kernel-size_t-to-fix-user-space-builds.patch		(git-fixes)
    + cifs-remove-pathname-for-file-from-SPDX-header.patch		(bsc#1193629)
    + uapi-Fix-undefined-__always_inline-on-non-glibc-syst.patch		(git-fixes)
    + tty-Partially-revert-the-removal-of-the-Cyclades-pub.patch		(git-fixes)
    + um-virt-pci-fix-uapi-documentation					(git-fixes)
    + net-sched-act_skbmod-Add-SKBMOD_F_ECN-option-support.patch		(bsc#1189998)
    + stddef-Introduce-struct_group-helper-macro.patch			(jsc#SLE-18978)
    + net-smc-add-support-for-user-defined-EIDs				(jsc#SLE-18331)
    + net-smc-add-generic-netlink-support-for-system-EID			(jsc#SLE-18331)
    + net-smc-add-netlink-support-for-SMC-Rv2				(jsc#SLE-18331)
    + net_sched-refactor-TC-action-init-API.patch				(bsc#1189998)
    + 0001-mm-mempolicy-add-MPOL_PREFERRED_MANY-for-multiple-pr.patch	(jsc#SLE-23098)
    + 0003-mm-mempolicy-wire-up-syscall-set_mempolicy_home_node.patch	(jsc#SLE-23098)
    + devlink-report-maximum-number-of-snapshots-with-regi.patch		(jsc#SLE-19253)
    + x86-arch_prctl-add-controls-for-dynamic-xstate-components.patch	(jsc#SLE-18931)
    + 0005-efi-generate-secret-key-in-EFI-boot-environment.patch		(fate#316350)
    + mptcp-add-missing-documented-NL-params				(git-fixes)
    + stddef-Introduce-DECLARE_FLEX_ARRAY-helper.patch			(git-fixes)


author: msuchanek@suse.com
changelog:
  - Add the rest of 1.0 IAA operation definitions to the user header (jsc#PED-813).
    + dmaengine-idxd-update-IAA-definitions-for-user-heade.patch


author: tiwai@suse.com
changelog:
  - Add linux/sev-guest.h (bsc#1211096):
    virt-Add-SEV-SNP-guest-driver
    virt-sevguest-Add-support-to-derive-key
    virt-sevguest-Add-support-to-get-extended-report


author: vcizek@suse.com
changelog:
  - Obsolete openssl-debuginfo
    * the package doesn't exist any more, has been replaced by
      openssl-{so_version}-debuginfo (bsc#1040172)


author: vcizek@suse.com
changelog:
  - Revert version back to 1.0.2m to get security fixes quickly to
    Tumbleweed
    * OpenSSL Security Advisory [02 Nov 2017] (bsc#1066242,bsc#1056058)


author: vcizek@suse.com
changelog:
  - change the sonum to 1.1, as all the minor versions keep ABI
    compatibility (bsc#1081335)
  - update baselibs.conf


author: dimstar@opensuse.org
changelog:
  - Update to version 0.27:
    + Drop usage of popt for equivalent API in glib2
    + Add back an internal snapshot of glib2 to break circular
      dependency
    + Fix --exists to check for Requires and Requires.private.
    + Various fixes for MinGW which should allow it to be used
      unpatched on that system
    + New autoconf macros PKG_INSTALLDIR and PKG_NOARCH_INSTALLDIR to
      help determine the .pc file install directory
    + Fix handling of --exact/atleast/max-version vs. =/>=/<=
    + Fix errors in man page source
    + Ensure testing only searches in the check directory
    + Bump glib requirement to 2.16 to avoid deprecated
      g_win32_get_package_installation_subdirectory()
    + Autotools refresh and update
    + Use g_alloca from glib instead of figuring out alloca ourselves
    + Remove search for setresuid & setreuid only needed for internal
      popt
    + Bugs fixed: fdo#833, fdo#2458, fdo#5214, fdo#5326, fdo#5703,
      fdo#6074, fdo#8653, fdo#9135, fdo#9143, fdo#9584, fdo#10652,
      fdo#11464, fdo#14396, fdo#17053, fdo#23922, fdo#28776,
      fdo#29011, fdo#29801, fdo#31699, fdo#31700, fdo#32622,
      fdo#34382, fdo#37266, fdo#39646, fdo#41081, fdo#43149,
      fdo#44843, fdo#45599, fdo#45742, fdo#48743
  - Changes from version 0.26:
    + Build system fixes
    + More tests
    + pkg.m4 fixups which makes autoconf 2.66 happier.
    + Drop support for legacy -config scripts.  Those should already
      be gone and cause problems in cross-compilation environments.
    + Drop embedded glib
    + Fix up pkg.m4 to handle the case of --exists working and
    - -cflags or --libs failing.
    + Various documentation updates
    + Allow $() through without escaping it.
    + Add --with-system-include-path instead of hard-coding
      /usr/include.
  - Pass --with-internal-glib to configure. We don't want to have a
    build cycle with glib, so we use the interal version.
  - Clean up spec-file using spec-cleaner and manually.
  - Drop pkg-config-dnl.patch: fixed upstream.


author: dimstar@opensuse.org
changelog:
  - Update to version 0.27.1:
    + Various fixes for using the internal glib snapshot. It should
      now be usable pretty much everywhere with the exception that
      universal builds are not supported on OS X.
    + Remove usage of gettext from the internal glib to avoid gettext
      and libintl dependencies
    + Update internal glib snapshot to 2.32.4
    + Fix check for POSIX shell used in tests to work better
    + Handle spaces in autodetected prefix on Windows
    + Bugs fixed: fdo#3550, fdo#51883, fdo#52031, fdo#53493.


author: p.drouand@gmail.com
changelog:
  - Update to version 0.28:
    + Fixed a pair of long-standing and intertwined bugs involving
      unwanted removal of flags:
    - Other Libs flags like -Wl are now kept in context order
      with -l flags.
    - Aggressive removal of all duplicate arguments has been scaled
      back so that just consecutive duplicate arguments are
      removed. One result of this change is that some flags could
      be repeated in the final output, especially flags from
      non-pkg-config packages like -lm. Since pkg-config rarely has
      enough knowledge here about the right thing to do, we throw
      the duplicate arguments at the compiler/linker and trust it
      will do the right thing.
    + Fixed an old bug to allow circular Requires. This fix brings
      along a small behavior change in that pkg-config resolves
      requires depth first, causing some lower level flags to show up
      earlier in the output than previously.
    + Cleaned up many corner-case bugs and ambiguous behavior in
      pkg-config's interface.
    + New autoconf macro PKG_CHECK_VAR for reading variables from .pc
      files.
    + Default to suppressing -L/lib and/or -L/lib64 like their /usr
      counterparts.
    + To help support multiarch scenarios out of the box,
      $host-pkg-config is now installed unless --disable-host-tool
      is passed to configure.
    + Added optional gcov usage through the --with-gcov configure
      option. As a result, many more tests were added to greatly
      increase the coverage of the code to 86% of executed lines on a
      Fedora 18 machine.
    + Bugs fixed: fdo#130, fdo#7331, fdo#16101, fdo#17053, fdo#19950,
      fdo#34504, fdo#48098, fdo#54231, fdo#54271, fdo#54379,
      fdo#54384, fdo#54386, fdo#54388, fdo#54389, fdo#54390,
      fdo#54391, fdo#54427, fdo#54463, fdo#54716, fdo#57078,
      fdo#58363, fdo#59435.


author: dvaleev@suse.com
changelog:
  - Don't redefine _arch, but use file pattern instead. This ensures
    we don't have to run fixing each and every arch.


author: zaitor@opensuse.org
changelog:
  - Update to version 0.29:
    + Fixed a regression from 0.28 in system -L flag handling. If the
      pc file has multiple system -L flags, every other flag will be
      left as is (fdo#78077).
    + Quoting of variables queried through --variable is removed so
      that the output can be used verbatim in subsequent shell
      commands (fdo#67904).
    + Fixed a regression from 0.28 in -L flag handling on Windows. A
      .libs suffix was inadvertantly being added to the library path.
    + Added a --validate option to check pc file syntax. This works
      just like --exists, but package dependencies are disabled
      (fdo#7000).
    + Added the PKG_PREREQ autoconf macro. Whereas
      PKG_PROG_PKG_CONFIG is used to check the version of the
      pkg-config tool, this is used to check the version of the
      pkg-config autoconf macros in use.
    + Added the PKG_CHECK_MODULES_STATIC autoconf macro. This will
      temporarily add --static to the pkg-config calls while invoking
      PKG_CHECK_MODULES (fdo#19541).
    + Many fixes to the testsuite for Windows. It should now pass for
      a MinGW, Cygwin, and cross-compiled MinGW using Wine for test
      execution (fdo#66939).
    + More consistent handling of prefix redefinition. On Windows,
      the prefix was always being redefined based on the pc file
      path. This feature can now be enabled or disabled at runtime on
      all platforms using the --define-prefix and
    - -dont-define-prefix options (fdo#63602).
    + Continue listing packages with --list-all even if there are
      errors in pc files (fdo#26615).
    + Various documentation improvements (fdo#62018, fdo#62374,
      fdo#66155).
    + Fixed a bug when multiple -isystem arguments are used
      (fdo#72584).
    + pkg-config is now built with largefile support to ensure that
      it works correctly on filesystems with 64 bit inodes
      (fdo#90078).
    + Bugs fixed: fdo#7000, fdo#19541, fdo#26615, fdo#62018,
      fdo#62374, fdo#63602, fdo#66155, fdo#66939, fdo#67904,
      fdo#70690, fdo#72584, fdo#78077, fdo#80378, fdo#80380,
      fdo#89267, fdo#90078, fdo#90437, fdo#92002.


author: zaitor@opensuse.org
changelog:
  - Update to version 0.29.1:
    + Fixed a regression from 0.29 with unquoting values queried with
    - -variable. In some cases, this would cause shell special
      characters to be escaped in ways they weren't before. Instead,
      the unquoting only occurs if the value appears to be quoted
      (fdo#93284).
    + Add support for building pkg-config with Microsoft Visual
      Studio (fdo#92489).
    + Allow overriding pkg-config variables with environment
      variables. By setting an environment variable of the form
      PKG_CONFIG_$PACKAGE_$VARIABLE, a pkg-config variable can be set
      globally without always having to pass --define-variable
      (fdo#90917).
    + Honor -Wl,-framework in addition to -framework so that multiple
      frameworks are handled on OSX (fdo#1278).
    + Fix the OSX build using --with-internal-glib (fdo#92902).


author: dimstar@opensuse.org
changelog:
  - Update to version 0.29.2:
    + Improved pkg-config's recursive package list expansion
      performance.
    + Handle an empty prefix setting correctly when --define-prefix
      is used (fdo#97453).
    + Lazily load pc files instead of reading all available pc files
      during initialization (fdo#98215).
    + Check the CPATH environment variable when determining system
      include paths like GCC does. Document the system search path
      behavior (fdo#99224).
    + Make PKG_CHECK_MODULES show the module list rather than the
      variable prefix in configure output (fdo#98334).
    + Fix bundled glib build with GCC 6 (fdo#98334).
    + Handle -isystem and -idirafter when PKG_CONFIG_SYSROOT_DIR is
      set (fdo#97337).
    + Check the INCLUDE environment variable when determining system
      include paths on Windows builds when --msvc-syntax is used
      (fdo#94729).
  - Drop pkg-config-gdate-fix.patch: fixed upstream.


author: mwilck@suse.com
changelog:
  - Update to version 15.4.12:
    * Add /etc/modprobe.d/README on SLE/Leap (bsc#1195051)
    * rpm-script: force-copy kernel to /boot (boo#1194501)


author: mwilck@suse.com
changelog:
  - Update to version 15.4.13:
    * 80-hotplug-cpu-mem.rules: restrict cpu rule to x86_64 (bsc#1204423)


author: mwilck@suse.com
changelog:
  - Update to version 15.4.15: Backport bug fixes from factory
    * driver-check.sh, unblacklist: convert egrep to grep -E (bsc#1203092)
    * kernel-scriptlets: don't pass flags to weak-modules2 (bsc#1195391)
    * driver-check.sh: avoid false positive error messages (boo#1200107)


author: mwilck@suse.com
changelog:
  - Update to version 15.5.2:
    * rpm-script: update bootloader after creating initramfs
      (boo#1213822)
    * rpm-script: check for regenerate-initrd-posttrans in %posttrans
      (boo#1212957)
    * cert-script: skip cert handling if efivarfs is not writable
      (bsc#1213428, bsc#1201066)


author: mwilck@suse.com
changelog:
  - Update to version 15.5.3:
    * blacklist RNDIS modules (bsc#1205767, jsc#PED-5731, CVE-2023-23559)
    * modprobe.d: Blacklist cls_tcindex module (bsc#1210335, CVE-2023-1829)
      (note: this is not a full fix for that CVE)


author: mwilck@suse.com
changelog:
  - Update to version 15.5.5:
    * Include unblacklist in initramfs (bsc#1224320)
    * regenerate-initrd-posttrans: run update-bootloader --refresh for XEN
    (bsc#1223278)
    * 60-io-scheduler.rules: test for "scheduler" sysfs attribute (boo#1216717)


author: fbui@suse.com
changelog:
  - Make %_modprobedir point to /lib/modprobe.d (bsc#1196275 bsc#1196406)
    Until SLE15-SP3:QU2, /usr/lib/modprobe.d path was not supported by kmod and
    since SLE15-SP4 /etc/modprobe.d/README has references to /lib/modprobe.d...


author: fbui@suse.com
changelog:
  - Don't emit a warning when the flag file in /var/lib/systemd/migrated/ is not
    present as it's expected (bsc#1208079).


author: fbui@suse.com
changelog:
  - Fix %sysctl_apply() and %binfmt_apply() so they are disabled when called from
    a chroot (bsc#1211272)


author: fbui@suse.com
changelog:
  - Switch to `systemd-hwdb` tool when updating the HW database. It's been
    introduced in systemd v219 and replaces the deprecated command `udevadm hwdb`.


author: fbui@suse.com
changelog:
  - Order packages that requires systemd after systemd-sysvcompat when this part
    of the transaction (bsc#1217964)
    systemd-sysvcompat has been introduced recently and contains the compatibility
    scripts used to support SysV init scripts. Make sure that the packages ordered
    after systemd are also ordered after systemd-sysvcompat so theirs rpm
    scriptlets can still rely on the compat scripts.
    On distributions where systemd-sysvcompat doesn't exist, the new ordering
    constraint should be a nop.


author: idonmez@suse.com
changelog:
  - Update to version 1.4.4
    * perf: Improved decompression speed, by > 10%
    * perf: Better compression speed when re-using a context
    * perf: Fix compression ratio when compressing large files with
      small dictionary
    * perf: zstd reference encoder can generate RLE blocks
    * perf: minor generic speed optimization
    * api: new ability to extract sequences from the parser for analysis
    * api: fixed decoding of magic-less frames
    * api: fixed ZSTD_initCStream_advanced() performance with fast modes
    * cli: Named pipes support
    * cli: short tar's extension support
    * cli: command --output-dir-flat=DIE , generates target files into
      requested directory
    * cli: commands --stream-size=# and --size-hint=#
    * cli: command --exclude-compressed
    * cli: faster -t test mode
    * cli: improved some error messages
    * cli: fix rare deadlock condition within dictionary builder
    * misc: Improved documentation : ZSTD_CLEVEL, DYNAMIC_BMI2,
      ZSTD_CDict, function deprecation, zstd format
    * misc: fixed educational decoder : accept larger literals section,
      and removed UNALIGNED() macro
  - Refresh pzstd.1.patch


author: idonmez@suse.com
changelog:
  - Update to version 1.4.5
    * perf: Improved decompression speed (x64 >+5%, ARM >+15%)
    * perf: Automatically downsizes ZSTD_DCtx when too large for too
    * perf: Improved fast compression speed on aarch64 (#2040, ~+3%)
    * perf: Small level 1 compression speed gains (depending on compiler)
    * fix: Compression ratio regression on huge files (> 3 GB) using high
      levels (--ultra) and multithreading
    * api: ZDICT_finalizeDictionary() is promoted to stable
    * api: new experimental parameter ZSTD_d_stableOutBuffer
    * cli: New --patch-from command, create and apply patches from files
    * cli: --filelist= : Provide a list of files to operate upon from a file
    * cli: -b can now benchmark multiple files in decompression mode
    * cli: New --no-content-size command
    * cli: New --show-default-cparams command
    * misc: new diagnosis tool, checked_flipped_bits, in contrib/
    * misc: Extend largeNbDicts benchmark to compression
    * misc: experimental edit-distance match finder in contrib/


author: bwiedemann@suse.com
changelog:
  - Update to version 1.4.7
    * Improved --long mode
    * --long now automatically enabled for any window size >= 128MB
    * Faster decompression of small blocks
    * CLI improvements
      + accept parameter through environment variable ZSTD_NBTHREADS
      + new command --output-dir-mirror
      + more accurate warning and error messages
    * New experimental features
      + Shared Thread Pool
      + Faster Dictionary Compression
      + New Sequence Ingestion API
    * Drop upstream fix-lib-build.patch


author: bwiedemann@suse.com
changelog:
  - Update to version 1.4.9
    * https://github.com/facebook/zstd/releases/tag/v1.4.9
    * >2x Faster Long Distance Mode
    * New Experimental Decompression Feature: ZSTD_d_refMultipleDDicts
    * bug: Use umask() to Constrain Created File Permissions
    * bug: Make Simple Single-Pass Functions Ignore Advanced Parameters
    * cli: Fix --output-dir-mirror's Rejection of ..-Containing Paths
    * cli: Allow Input From Console When -f/--force is Passed


author: ali.abdallah@suse.com
changelog:
  - Update to version 1.5.0 (jsc#SLE-20392)
    * https://github.com/facebook/zstd/releases/tag/v1.5.0
    * Improved Middle-Level Compression Speed
    * Improved High-Level Compression Ratio
    * Faster Decompression Speed
    * Dynamic Library Supports Multithreading by Default


author: ali.abdallah@suse.com
changelog:
  - Fix CVE-2022-4899, bsc#1209533
    * Fix buffer underflow when dir1 == ""
    * Disallow empty string as an argument for --output-dir-flat=""
    and --output-dir-mirror="".
  - Added patches:
    * Disallow-empty-output-directory.patch
    * Fix-buffer-underflow-for-null-dir1.patch


