# changelog

author: sflees@suse.de
changelog:
  - Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
    * added fix-CVE-2019-12749.patch


author: sflees@suse.de
changelog:
  - Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
    * fix-upstream-userdb-constpointer.patch
    * fix-upstream-CVE-2020-35512.patch


author: sflees@suse.de
changelog:
  - Fix CVE-2020-12049 truncated messages lead to resource exhaustion
    (CVE-2020-12049, bsc#1172505)
    * fix-upstream-CVE-2020-12049.patch
  - Rebased fix-CVE-2019-12749.patch


author: sflees@suse.de
changelog:
  - Fix a potential crash that could be triggered by an invalid signature.
    (CVE-2022-42010, bsc#1204111)
    * fix-upstream-CVE-2022-42010.patch
  - Fix an out of bounds read caused by a fixed length array (CVE-2022-42011,
    bsc#1204112)
    * fix-upstream-CVE-2022-42011.patch
  - A message in non-native endianness with out-of-band Unix file descriptors
    would cause a use-after-free and possible memory corruption CVE-2022-42012,
    bsc#1204113)
    * fix-upstream-CVE-2022-42012.patch
  - Disable asserts (bsc#1087072)
  - Refreshed patches
    * fix-upstream-CVE-2020-35512.patch


author: thomas.blume@suse.com
changelog:
  - Update to version 049.1+suse.209.gebcf4f33:
    * fix(systemd): add unit files for systemd-coredump (bsc#1190845)


author: antonio.feijoo@suse.com
changelog:
  - Update to version 049.1+suse.213.g346cf20c:
    * fix(suse): add 60-io-scheduler.rules (bsc#1188713)
    * fix(kernel-modules): add blk_mq_alloc_disk and blk_cleanup_disk to blockfuncs (bsc#1190326)


author: thomas.blume@suse.com
changelog:
  - Update to version 049.1+suse.216.gf705637b:
    * fix(iscsi): add support for the new iscsiadm "no-wait" (-W) command
    * fix(iscsi): add iscsid.service requirements
      (bsc#1187190)


author: thomas.blume@suse.com
changelog:
  - Update to version 049.1+suse.218.gca24e614:
    * fix(iscsi): add iscsi-init.service requirements (bsc#1193512)


author: antonio.feijoo@suse.com
changelog:
  - Update to version 049.1+suse.224.gd285ddd8:
    * fix(dracut.spec): change util-linux-systemd version for SLE15-SP2 (bsc#1194162)
    * fix(dracut.spec): require util-linux-systemd (bsc#1194162)
    * fix(url-lib): improve ca-bundle detection (bsc#1175892)


author: antonio.feijoo@suse.com
changelog:
  - Update to version 049.1+suse.228.g07676562:
    * fix(network): consistent use of "$gw" for gateway (bsc#1192685)
    * fix(install): handle builtin modules (bsc#1194716)


author: antonio.feijoo@suse.com
changelog:
  - Update to version 049.1+suse.232.g2ccee559:
    * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
    * fix(dracut-functions.sh): ip route parsing (bsc#1195011)


author: antonio.feijoo@suse.com
changelog:
  - Update to version 049.1+suse.234.g902e489c:
    * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)


author: antonio.feijoo@suse.com
changelog:
  - Update to version 049.1+suse.238.gd8dbb075:
    * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
    * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)


author: antonio.feijoo@suse.com
changelog:
  - Update to version 049.1+suse.247.gfb7df05c:
    * fix(systemd): add missing modprobe@.service (bsc#1203749)
    * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)
    * fix(drm): consider also drm_dev_register when looking for gpu driver (bsc#1195618)
    * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)


author: jengelh@inai.de
changelog:
  - Update to release 1.21
    * Handle DWARF5 DW_OP_addrx and
      subprogram ret type with abstract_origin properly.


author: msuchanek@suse.com
changelog:
  - Handle zero sized per-cpu veriables in Linux BTF.
    + btf_encoder-fix-and-complete-filtering-out-zero-sized-per-CPU-variables.patch


author: msuchanek@suse.com
changelog:
  - Update to version 1.21+git175.1ef87b2 (jsc#SLE-17288):
    * libbpf: bump dependency to >= 0.4.0
    * CMakeLists.txt: Enable SHARED and STATIC lib creation
    * libbpf: Allow to use packaged version
    * btfdiff: Support diffing DWARF vs detached BTF
    * pahole: Allow encoding BTF into a detached file
    * pahole: Add --kabi_prefix flag
    * btf_encoder: fix and complete filtering out zero-sized per-CPU variables
    * btf: Remove ftrace filter
    * pahole: Introduce --with_flexible_array option to show just types ending in a flexible array
    * Many updates to btf_encoder and bug fixes
  - Remove upstreamed patches
    - btf_encoder-fix-and-complete-filtering-out-zero-sized-per-CPU-variables.patch
    - remove-ftrace-filter.patch
  - Pretend version 1.22 to make kernel happy
    + dwarves-Prep-1.22.patch


author: msuchanek@suse.com
changelog:
  - 15.4 has new elfutils, drop libebl-plugins dependency.
  - Update to version 1.21+git177.1ef87b2:
    * Fix crash with split BTF debuginfo
    * CMakeList.txt: Bump version to the upcoming 1.22 release, not out of the door yet
    - Remove upstreamed patch dwarves-Prep-1.22.patch


author: jengelh@inai.de
changelog:
  - Update to release 1.22 (bsc#1190340).
    * Ability to encode BTF to a separate file
    * Multithreaded DWARF loading
    * Details at https://marc.info/?l=dwarves&m=162975403628056&w=2


author: mliska@suse.cz
changelog:
  - Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
    unconditionally in the spec file. As we can't support binary diff,
    a newly added test-case is removed from the patch.


author: schwab@linux-m68k.org
changelog:
  - ppc-machine-flags.patch: support EM_PPC machine flags
  - disable-tests-with-ptrace.patch: disable more tests


author: jengelh@inai.de
changelog:
  - Update package descriptions.
  - Rename libebl1 to libebl-plugins as these are not linked,
    but dlopened using their unversioned libebl_$ARCH.so name.
  - Have libelf1 require libebl-plugins (libebl.a, which does the
    dlopen call, is staticly built into libelf1). This is necessary
    for pahole to display its results. [boo#1049871]


author: jmoreira@suse.com
changelog:
  - CVE-2017-7613: elfutils: denial of service (memory consumption)
    via a crafted ELF file (bnc#1033090)
    Add patch:
    elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
  - CVE-2017-7612: elfutils: denial of service (heap-based buffer
    over-read and application crash) via a crafted ELF file
    (bnc#1033089)
    Add patch: elfutils-dont-trust-sh_entsize.patch


author: jmoreira@suse.com
changelog:
  - CVE-2018-16402: libelf: denial of service/double free on an
    attempt to decompress the same section twice (bnc#1107066)
    Add patch:
    libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
  - CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
    function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
    Add patch:
    arlib-check-that-sh_entsize-isnt-zero.patch
  - CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
    application crash) via a crafted ELF file (bnc#1033088)
    Add patch:
    elflint-check-symbol-table-data-is-big-enough-before-check.patch
  - CVE-2017-7610: elflint: heap-based buffer overflow in check_group
    (bnc#1033087)
    Add patch:
    elflint-dont-check-section-group-without-flags-word.patch
  - CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
    Add patch:
    libdw-check-end-of-attributes-list-consistently.patch
  - CVE-2018-16062: heap-buffer-overflow in
    /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
    Add patch:
    libdw-readelf-make-sure-there-is-enough-data-to-read.patch
  - CVE-2018-18310: Invalid Address Read problem in
    dwfl_segment_report_module.c (bnc#1111973)
    Add patch:
    libdwfl-sanity-check-partial-core-file-data-reads.patch
  - CVE-2019-7150: dwfl_segment_report_module doesn't check whether
    the dyn data read from core file is truncated (bnc#1123685)
    Add patch:
    libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
  - CVE-2019-7665: NT_PLATFORM core file note should be a zero
    terminated string (CVE is a bit misleading, as this is not a bug
    in libelf as described) (bnc#1125007)
    Add patch:
    libebl-check-NT_PLATFORM-core-notes.patch
  - CVE-2017-7609: memory allocation failure in __libelf_decompress
    (bnc#1033086)
    Add patch:
    libelf-check-compression-before-allocate-output-buffer.patch
  - CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
    Add patch:
    libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
  - CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
    (readelf.c) (bnc#1033084)
    Add patch:
    readelf-fix-off-by-one-sanity-check.patch
  - CVE-2018-18520: eu-size: Bad handling of ar files inside are
    files (bnc#1112726)
    Add patch:
    size-handle-recursive-elf-ar-files.patch
  - CVE-2017-7608: heap-based buffer overflow in
    ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
    Add patch:
    use-the-empty-string-for-note-names-with-zero-size.patch


author: schwab@suse.de
changelog:
  - disable-tests-with-ptrace.patch: Remove, set XFAIL_TESTS instead
  - dwelf_elf_e_machine_string.patch: Avoid spurious failure


author: jeffm@suse.com
changelog:
  - Update to version 0.177 (Martin Liška):
      elfclassify: New tool to analyze ELF objects.
      readelf: Print DW_AT_data_member_location as decimal offset.
      Decode DW_AT_discr_list block attributes.
      libdw: Add DW_AT_GNU_numerator, DW_AT_GNU_denominator and DW_AT_GNU_bias.
      libdwelf: Add dwelf_elf_e_machine_string.
      dwelf_elf_begin now only returns NULL when there is an error
      reading or decompressing a file. If the file is not an ELF file
      an ELF handle of type ELF_K_NONE is returned.
      backends: Add support for C-SKY.
    - Update to version 0.176
      build: Add new --enable-install-elfh option.
      Do NOT use this for system installs (it overrides glibc elf.h).
      backends: riscv improved core file and return value location support.
      Fixes CVE-2019-7146, CVE-2019-7148, CVE-2019-7149, CVE-2019-7664
    - CVE-2019-7150: dwfl_segment_report_module doesn't check whether
      the dyn data read from core file is truncated (bnc#1123685)
    - CVE-2019-7665: NT_PLATFORM core file note should be a zero
      terminated string (CVE is a bit misleading, as this is not a bug
      in libelf as described) (bnc#1125007)
    - Removed patches:
    - libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
    - libebl-check-NT_PLATFORM-core-notes.patch
    - Update to version 0.175 (Martin Liška):
      readelf: Handle mutliple .debug_macro sections.
      Recognize and parse GNU Property, NT_VERSION and
      GNU Build Attribute ELF Notes.
      strip: Handle SHT_GROUP correctly.
      Add strip --reloc-debug-sections-only option.
      Handle relocations against GNU compressed sections.
      libdwelf: New function dwelf_elf_begin.
      libcpu: Recognize bpf jump variants BPF_JLT, BPF_JLE, BPF_JSLT
      and BPF_JSLE.
      backends: RISCV handles ADD/SUB relocations.
      Handle SHT_X86_64_UNWIND.
    - CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
      function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
    - CVE-2018-18310: Invalid Address Read problem in
      dwfl_segment_report_module.c (bnc#1111973)
    - CVE-2018-18520: eu-size: Bad handling of ar files inside are
      files (bnc#1112726)
    - Removed patches:
    - arlib-check-that-sh_entsize-isnt-zero.patch
    - libdwfl-sanity-check-partial-core-file-data-reads.patch
    - size-handle-recursive-elf-ar-files.patch
    - Update to version 0.174 (Martin Liška):
      libelf, libdw and all tools now handle extended shnum and
      shstrndx correctly.
      elfcompress: Don't rewrite input file if no section data needs
      updating. Try harder to keep same file mode bits
      (suid) on rewrite.
      strip: Handle mixed (out of order) allocated/non-allocated
      sections.
      unstrip: Handle SHT_GROUP sections.
      backends: RISCV and M68K now have backend implementations to
      generate CFI based backtraces.
    - CVE-2018-16402: libelf: denial of service/double free on an
      attempt to decompress the same section twice (bnc#1107066)
      Double-free crash in nm and readelf
    - CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
    - CVE-2018-16062: heap-buffer-overflow in
      /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
      Removed patches:
      libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
      libdw-check-end-of-attributes-list-consistently.patch
      libdw-readelf-make-sure-there-is-enough-data-to-read.patch
    - Update to version 0.173 (Martin Liška):
      More fixes for crashes and hangs found by afl-fuzz. In particular various
      functions now detect and break infinite loops caused by bad DIE tree cycles.
      readelf: Will now lookup the size and signedness of constant value types
      to display them correctly (and not just how they were encoded).
      libdw: New function dwarf_next_lines to read CU-less .debug_line data.
      dwarf_begin_elf now accepts ELF files containing just .debug_line
      or .debug_frame sections (which can be read without needing a DIE
      tree from the .debug_info section).
      Removed dwarf_getscn_info, which was never implemented.
      backends: Handle BPF simple relocations.
      The RISCV backends now handles ABI specific CFI and knows about
      RISCV register types and names.
    - Update to version 0.172 (Martin Liška):
      No functional changes compared to 0.171.
      Various bug fixes in libdw and eu-readelf dealing with bad DWARF5 data.
      Thanks to running the afl fuzzer on eu-readelf and various testcases.
    - Update to version 0.171 (Martin Liška):
      DWARF5 and split dwarf, including GNU DebugFission, are supported now.
      Data can be read from the new DWARF sections .debug_addr, .debug_line_str,
      .debug_loclists, .debug_str_offsets and .debug_rnglists.  Plus the new
      DWARF5 and GNU DebugFission encodings of the existing .debug sections.
      Also in split DWARF .dwo (DWARF object) files.  This support is mostly
      handled by existing functions (dwarf_getlocation*, dwarf_getsrclines,
      dwarf_ranges, dwarf_form*, etc.) now returning the data from the new
      sections and data formats.  But some new functions have been added
      to more easily get information about skeleton and split compile units
      (dwarf_get_units and dwarf_cu_info), handle new attribute data
      (dwarf_getabbrevattr_data) and to keep references to Dwarf_Dies
      that might come from different sections or files (dwarf_die_addr_die).
      Not yet supported are .dwp (Dwarf Package) and .sup (Dwarf Supplementary)
      files, the .debug_names index, the .debug_cu_index and .debug_tu_index
      sections. Only a single .debug_info (and .debug_types) section are
      currently handled.
      readelf: Handle all new DWARF5 sections.
    - -debug-dump=info+ will show split unit DIEs when found.
    - -dwarf-skeleton can be used when inspecting a .dwo file.
      Recognizes GNU locviews with --debug-dump=loc.
      libdw: New functions dwarf_die_addr_die, dwarf_get_units,
      dwarf_getabbrevattr_data and dwarf_cu_info.
      libdw will now try to resolve the alt file on first use of
      an alt attribute FORM when not set yet with dwarf_set_alt.
      dwarf_aggregate_size() now works with multi-dimensional arrays.
      libdwfl: Use process_vm_readv when available instead of ptrace.
      backends: Add a RISC-V backend.
      There were various improvements to build on Windows.
      The sha1 and md5 implementations have been removed, they weren't used.
    - Update to version 0.170 (Martin Liška):
      libdw: Added new DWARF5 attribute, tag, character encoding, language code,
      calling convention, defaulted member function and macro constants
      to dwarf.h.
    New functions dwarf_default_lower_bound and dwarf_line_file.
    dwarf_peel_type now handles DWARF5 immutable, packed and shared tags.
    dwarf_getmacros now handles DWARF5 .debug_macro sections.
      strip: Add -R, --remove-section=SECTION and --keep-section=SECTION.
      backends: The bpf disassembler is now always build on all platforms.
    - Includes changes in 0.169
      backends: Add support for EM_PPC64 GNU_ATTRIBUTES.
      Frame pointer unwinding fallback support for i386, x86_64, aarch64.
      translations: Update Polish translation.
    - CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
      application crash) via a crafted ELF file (bnc#1033088)
    - CVE-2017-7610: elflint: heap-based buffer overflow in check_group
      (bnc#1033087)
    - CVE-2017-7609: memory allocation failure in __libelf_decompress
      (bnc#1033086)
    - CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
      (readelf.c) (bnc#1033084)
    - CVE-2017-7608: heap-based buffer overflow in
      ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
    - CVE-2017-7613: elfutils: denial of service (memory consumption)
      via a crafted ELF file (bnc#1033090)
    - CVE-2017-7612: elfutils: denial of service (heap-based buffer
      over-read and application crash) via a crafted ELF file (bnc#1033089)
    - Removed patches:
    - obsolete 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
    - ppc-machine-flags.patch
    - elflint-check-symbol-table-data-is-big-enough-before-check.patch
    - elflint-dont-check-section-group-without-flags-word.patch
    - libelf-check-compression-before-allocate-output-buffer.patch
    - readelf-fix-off-by-one-sanity-check.patch
    - use-the-empty-string-for-note-names-with-zero-size.patch
    - elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
    - elfutils-dont-trust-sh_entsize.patch
  - Packaging cleanups:
    - Modernize specfile and metadata. (Jan Engelhardt)
    - Use %make_build (Martin Liška)
    - Update License tag to GPL-3.0-or-later, as requested by legal
      review. (Dominique Leuenberger)
    - Don't make elfutils recommend elfutils-lang as elfutils-lang
      already supplements elfutils. (Antoine Belvire)
    - Fix typo in the recommends name bsc#1104264 (Tomas Chvatal)
    - Use %license (boo#1082318) (Fabian Vogt)
  - Test fixes (Andreas Schwab):
    - disable-tests-with-ptrace.patch: Remove, set XFAIL_TESTS instead
    - dwelf_elf_e_machine_string.patch: Avoid spurious failure


author: jengelh@inai.de
changelog:
  - Update package summaries. Replace old RPM constructs.
  - Remove --with-pic which is useless with --disable-static.
  - Edit pre_checkin.sh to remove dead python3 file.


author: werner@suse.de
changelog:
  - Add patch file-a642587a9c.patch for bsc#1096974, bsc#1096984, and
    CVE-2018-10360 -- Avoid reading past the end of buffer


author: werner@suse.de
changelog:
  - Add patch 0002-PR-62-spinpx-limit-size-of-file_printable.patch to
    fix bsc#1126117, bsc#1126118, and bsc#1126119 for CVE-2019-8905,
    CVE-2019-8906, and CVE-2019-8907


author: werner@suse.de
changelog:
  - Add temporary patch CVE-2019-18218-46a8443f.patch from upstream
    to fix bsc#1154661 -- heap-based buffer overflow in cdf_read_property_info in cdf.c


author: werner@suse.de
changelog:
  - Add patchfix_of_backport_PR-62.patch as previous backport caused
    a shorten output of the elf interprter (bsc#1176123)


author: meissner@suse.com
changelog:
  - updated to 1.4.1
    - added manpages
    - fipscheck/fipshmac: Add -s option to specify the hmac suffix
    - fipshmac: Add '-d' option to specify where to put the .hmac files
    - various bugfixes


author: vcizek@suse.com
changelog:
  - Remove #include of unused fips.h to fix build with OpenSSL 1.1.1
    (bsc#1149792)
    * add fipscheck-fips.h_not_needed.patch


author: astieger@suse.com
changelog:
  - GNU awk 4.1.3:
    * Regexp parsing with extra brackets should now be working again.
    * Updated to latest config.guess and config.sub.
    * bug fixes


author: astieger@suse.com
changelog:
  * GNU awk 4.1.4:
    * z/OS support updated
    * debugger improvements
    * return value of system() enhanced to convey more information
    * two-way pipe handling improved
    * The -d option now allows -d- to print to standard output.
    * The DJGPP port is now officially deprecated.


author: josef.moellers@suse.com
changelog:
  - Added an explicit rpmlint rule to keep one file (gawkapi.h)
    from requiring a separate package.
    [+gawk.rpmlintrc]


author: schwab@linux-m68k.org
changelog:
  - Update to gawk 4.2.0
    * If not in POSIX mode, changes to ENVIRON are reflected into
      gawk's environment
    * The series of numbers returned by rand() should now be "more
      random" than previously
    * Multiple changes related to the pretty printer
    * The igawk script and igawk.1 man page are no longer installed
    * Gawk now processes a maximum of two hexadecimal digits in \x
      escape sequences inside strings
    * Setting PROCINFO["redirection", "NONFATAL"] to true makes I/O
      errors for "redirection" not fatal
    * Gawk now supports retryable I/O via PROCINFO[input-file, "RETRY"]
    * Revisions in the POSIX standard remove the special case for POSIX
      mode when FS = " " where newline was not a field separator
    * Gawk now supports strongly typed regexp constants
    * The new typeof() function can be used to indicate if a variable or
      array element is an array, regexp, string or number
    * Optimizations are now enabled by default
    * Passing negative operands to any of the bitwise functions now
      produces a fatal error
    * The mktime function now accepts an optional second argument
    * The FIELDWIDTHS parsing syntax has been enhanced to allow specifying
      how many characters to skip before a field starts
    * The PROCINFO["argv"] array records all of gawk's command line arguments
      as gawk received them
  - gawk_ppc64le_ignore_transient_test_time_failure.patch: removed


author: astieger@suse.com
changelog:
  - GNU awk 4.2.1:
    * documentation updates
    * In MPFR mode, When ROUNDMODE changes, string values for
      numerically type values will be redone
    * various bug fixes
    * drop fold-string.patch, upstream
  - Use %license (boo#1082318)


author: schwab@suse.de
changelog:
  - 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
    0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
    0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
    0004-powerpc64le-add-optimized-strlen-for-P9.patch,
    0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
    0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
    0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
    0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
    0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
    0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
    0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
    0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
    0013-powerpc64le-Optimize-memset-for-POWER10.patch,
    0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
    0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
    improvements (bsc#1194785, jsc#SLE-18195)


author: schwab@suse.de
changelog:
  - getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
    (CVE-2021-3999, bsc#1194640, BZ #28769)


author: schwab@suse.de
changelog:
  - selinux-deprecated.patch: Disable warnings due to deprecated libselinux
    symbols used by nss and nscd (bsc#1197718)
  - systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
    (bsc#1197718, BZ #28771)


author: schwab@suse.de
changelog:
  - strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
    __strncpy_power9 (bsc#1200334, BZ #29197)


author: schwab@suse.de
changelog:
  - static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
    optimizations (bsc#1200855, BZ #25051)


author: schwab@suse.de
changelog:
  - disable-check-consistency.patch: i386: Disable check_consistency for GCC
    5 and above (bsc#1201640, BZ #25788)


author: schwab@suse.de
changelog:
  - x86-shared-non-temporal-threshold.patch: Reversing calculation of
    __x86_shared_non_temporal_threshold (bsc#1201942)


author: astieger@suse.com
changelog:
  - gzip 1.10:
    * Compressed gzip output no longer contains the current time as
      a timestamp when the input is not a regular file.  Instead, the
      output contains a null (zero) timestamp.  This makes gzip's
      behavior more reproducible when used as part of a pipeline.
    * A use of uninitialized memory on some malformed inputs has been
      fixed.
    * A few theoretical race conditions in signal handers have been
      fixed.
  - drop upstreamed patches:
    * gnulib-libio.patch
    * gzip-1.8-deprecate_netstat.patch


author: kstreitova@suse.com
changelog:
  - add gzip-1.10-ibm_dfltcc_support.patch [jsc#SLE-5818] [jsc#SLE-8914]
    * it adds support for DFLTCC (hardware-accelerated deflation)
      for s390x arch
    * enable it via "--enable-dfltcc" option


author: kstreitova@suse.com
changelog:
  - refresh gzip-1.10-ibm_dfltcc_support.patch to fix three data
    corruption issues [bsc#1145276] [jsc#SLE-5818] [jsc#SLE-8914]


author: kstreitova@suse.com
changelog:
  - Enable DFLTCC compression for s390x for levels 1-6 (i. e. to make
    it used by default) by adding -DDFLTCC_LEVEL_MASK=0x7e to CLFAGS.
    [jsc#SLE-13775]


author: pgajdos@suse.com
changelog:
  - fix DFLTCC segfault [bsc#1177047]
  - added patches
    fix https://git.savannah.gnu.org/cgit/gzip.git/commit/?id=be0a534ba2b6e77da289de8da79e70843b1028cc
    + gzip-1.10-fix-DFLTCC-segfault.patch


author: danilo.spinella@suse.com
changelog:
  - Fix escaping of malicious filenames (CVE-2022-1271 bsc#1198062)
    * bsc1198062.patch
    * bsc1198062-2.patch


author: sbrabec@suse.com
changelog:
  - Version update to 2.0.4:
    * translation updates
    * support for U+202F
    * minor fixes and code cleanup
    * minor improvements and more characters support
  - Enable vlock (bsc#1056449, FATE#261).


author: fbui@suse.com
changelog:
  - Drop from some fill-up templates, a couple of sysconfig variables no
    more read by systemd (fate#319454)
    So the relevant settings can be defined in only one place.


author: sbrabec@suse.com
changelog:
  - Move initial NumLock handling from systemd back to kbd:
    * Add kbdsettings service written by Thomas Blume (boo#1010880,
      kbdsettings, kbdsettings.service, numlockbios.c,
      update sysconfig.console and sysconfig.keyboard).
    * Exclude numlockbios support for non x86 platforms
      (kbdsettings-nox86.patch).
  - Drop references to KEYTABLE and COMPOSETABLE (boo#1010880#c32,
    boo#1010880#c54,  sysconfig.keyboard.del, README.SUSE,
    drop kbd.fillup).
  - Fix paths in kbd.pl.


author: sbrabec@suse.com
changelog:
  - Do not cause error on UNICODE characters >= 0xF000 (e. g.
    ligature fi) (bsc#1085432, kbd-unicode-fxxx.patch).


author: sbrabec@suse.com
changelog:
  - Disable characters >=U+F000. These do not work properly
    (bsc#1085432#c15, kbd-unicode-fxxx.patch).


author: mkoutny@suse.com
changelog:
  - ipc: remove memcg accounting for sops objects in do_semtimedop()
    (bsc#1190115).
  - Delete
    patches.suse/ipc-remove-memcg-accounting-for-sops-objects.patch.
    Refreshing patch with upstream metadata.
  - commit 2d6ef2e


author: tiwai@suse.de
changelog:
  - hwmon: (tmp421) fix rounding for negative values (git-fixes).
  - hwmon: (tmp421) report /PVLD condition as fault (git-fixes).
  - hwmon: (mlxreg-fan) Return non-zero value when fan current
    state is enforced from sysfs (git-fixes).
  - commit 2560193


author: dwagner@suse.de
changelog:
  - blk-mq: kABI fixes for blk_mq_queue_map (bsc#1185762).
  - blk-mq: don't deactivate hctx if managed irq isn't used
    (bsc#1185762).
  - blk-mq: mark if one queue map uses managed irq (bsc#1185762).
  - genirq: add device_has_managed_msi_irq (bsc#1185762).
  - commit 57a6cb7


author: dwagner@suse.de
changelog:
  - blk-mq: kABI fixes for blk_mq_queue_map (bsc#1185762).
  - blk-mq: don't deactivate hctx if managed irq isn't used
    (bsc#1185762).
  - blk-mq: mark if one queue map uses managed irq (bsc#1185762).
  - genirq: add device_has_managed_msi_irq (bsc#1185762).
  - commit 71f9eaf


author: bp@suse.de
changelog:
  - x86/alternatives: Teach text_poke_bp() to emulate instructions
    (bsc#1185302).
  - Refresh
    patches.suse/x86-alternatives-sync-bp_patching-update-for-avoiding-null-pointer-exception.patch.
  - commit ef191ae


author: mkubecek@suse.cz
changelog:
  - series.conf: cleanup
  - move a kabi workaround into correct section:
    patches.kabi/ipvs-Fix-up-kabi-for-expire_nodest_conn_work-additio.patch
  - commit bc02214


author: trenn@suse.com
changelog:
  - x86/cpu: Fix core name for Sapphire Rapids (jsc#SLE-15289).
  - powercap: intel_rapl: add support for Sapphire Rapids
    (jsc#SLE-15289).
  - commit 053c38b


author: lhenriques@suse.de
changelog:
  - ceph: allow ceph.dir.rctime xattr to be updatable (bsc#1205989).
  - ceph: lockdep annotations for try_nonblocking_invalidate
    (bsc#1205988).
  - ceph: request Fw caps before updating the mtime in
    ceph_write_iter (bsc#1205987).
  - ceph: remove bogus checks and WARN_ONs from ceph_set_page_dirty
    (bsc#1205986).
  - ceph: fix fscache invalidation (bsc#1205985).
  - ceph: do not access the kiocb after aio requests (bsc#1205984).
  - commit 3a3eff6


author: jslaby@suse.cz
changelog:
  - Update
    patches.suse/x86-bugs-Add-AMD-retbleed-boot-parameter.patch
    (bsc#1199657 CVE-2022-29900 CVE-2022-29901 bsc#1203271
    bsc#1206032).
  - Refresh patches.suse/x86-bugs-Add-retbleed-ibpb.patch.
  - Refresh patches.suse/x86-bugs-Enable-STIBP-for-JMP2RET.patch.
    Fix mitigations=off to imply retbleed=off (bsc#1206032).
  - commit f959a8e


author: jslaby@suse.cz
changelog:
  - docs/kernel-parameters: Update descriptions for "mitigations="
    param with retbleed (bsc#1199657 CVE-2022-29900 CVE-2022-29901
    bsc#1203271 bsc#1206032).
  - commit 012ee9f


author: jslaby@suse.cz
changelog:
  - x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon
    resume from S3 (bsc#1206037).
  - commit df768bd


author: jslaby@suse.cz
changelog:
  - Refresh
    patches.suse/x86-speculation-Disable-RRSBA-behavior.patch.
    Fix up after merge from cve/5.3. The patch can be closer to upstream in
    15sp3 as we have more than in the cve branch.
  - commit 344ce75


author: tiwai@suse.de
changelog:
  - proc: proc_skip_spaces() shouldn't think it is working on C
    strings (CVE-2022-4378 bsc#1206207).
  - proc: avoid integer type confusion in get_proc_long
    (CVE-2022-4378 bsc#1206207).
  - commit 1e50bbf


author: jslaby@suse.cz
changelog:
  - Fix grub's requoted kernel parameters (bsc#1181111)
    * 0001-libkmod-config-revamp-kcmdline-parsing-into-a-state-.patch
    * 0002-libkmod-config-re-quote-option-from-kernel-cmdline.patch


author: jengelh@inai.de
changelog:
  - Update to release 29
    * Fix `modinfo -F` not working for built-in modules and
      certain fields.
    * Fix a memory leak, overflow and double free on error path.
  - Drop 0001-Fix-modinfo-F-always-shows-name-for-built-ins.patch,
    0001-libkmod-config-revamp-kcmdline-parsing-into-a-state-.patch,
    0002-libkmod-config-re-quote-option-from-kernel-cmdline.patch
    (all merged)


author: msuchanek@suse.de
changelog:
  - /usr/lib should override /lib where both are available. Support /usr/lib for
    depmod.d as well.
    * Refresh usr-lib-modprobe.patch
  - Remove test patches included in release 29
    - kmod-populate-modules-Use-more-bash-more-quotes.patch
    - kmod-testsuite-compress-modules-if-feature-is-enabled.patch
    - kmod-also-test-xz-compression.patch


author: msuchanek@suse.de
changelog:
  - Display module information even for modules built into the running kernel
    (bsc#1189537).
    + libkmod-Provide-info-even-for-modules-built-into-the.patch


author: msuchanek@suse.com
changelog:
  - Use docbook 4 rather than docbook 5 for building man pages (bsc#1190190).
    * Refres no-stylesheet-download.patch


author: msuchanek@suse.com
changelog:
  - Enable ZSTD on 15.3 as well (boo#1192104).
  - Only test ZSTD in testsuite on releases where it is available.


author: suse-beta@cboltz.de
changelog:
  - update to AppArmor 2.11.95 aka 2.12 beta1
    - no changes in libapparmor
    - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
      for the detailed upstream changelog


author: suse-beta@cboltz.de
changelog:
  - update to AppArmor 2.12
    - preserve errno across aa_*_unref() functions
    - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
      for the detailed upstream changelog
  - no longer package static libapparmor.a


author: suse-beta@cboltz.de
changelog:
  - update to AppArmor 2.13
    - add support for multiple cache directories and cache overlays
      (boo#1069906, boo#1074429)
    - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13
      for the detailed upstream changelog


author: suse-beta@cboltz.de
changelog:
  - update to AppArmor 2.13.1
    - several bug fixes
    - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1
      for the detailed upstream changelog


author: suse-beta@cboltz.de
changelog:
  - update to AppArmor 2.13.2
    - no changes in libapparmor
    - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2
      for the detailed upstream changelog


author: suse-beta@cboltz.de
changelog:
  - update to AppArmor 2.13.1
    - some fixes in cache handling
    - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3
      for the detailed upstream changelog


author: suse-beta@cboltz.de
changelog:
  - update to AppArmor 2.13.4
    - fix log parsing for logs with an embedded newline
    - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4
      for the detailed upstream changelog


author: suse-beta@cboltz.de
changelog:
  - update to AppArmor 2.13.5
    - fix two potential build failures
    - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5
      for the detailed upstream changelog
  - add libapparmor-so-number.diff to fix libapparmor so version (!658)


author: suse-beta@cboltz.de
changelog:
  - update to AppArmor 2.13.6
    - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.6
      for the detailed upstream changelog
  - drop upstreamed patch libapparmor-so-number.diff


author: lnussel@suse.de
changelog:
  - Update to version 0.0+git20171227.670229c:
    * Added ABI version number
    * AVX2/AVX-512F optimizations of BLAMKA
    * Set Argon2 version number from the command line
    * New bindings
    * Minor bug and warning fixes (no security issue)
  - use _service file


author: lnussel@suse.de
changelog:
  - Split translations to -lang package
  - New version to 2.3.1
    * Support VeraCrypt 128 bytes passwords.
      VeraCrypt now allows passwords of maximal length 128 bytes
      (compared to legacy TrueCrypt where it was limited by 64 bytes).
    * Strip extra newline from BitLocker recovery keys
      There might be a trailing newline added by the text editor when
      the recovery passphrase was passed using the --key-file option.
    * Detect separate libiconv library.
      It should fix compilation issues on distributions with iconv
      implemented in a separate library.
    * Various fixes and workarounds to build on old Linux distributions.
    * Split lines with hexadecimal digest printing for large key-sizes.
    * Do not wipe the device with no integrity profile.
      With --integrity none we performed useless full device wipe.
    * Workaround for dm-integrity kernel table bug.
      Some kernels show an invalid dm-integrity mapping table
      if superblock contains the "recalculate" bit. This causes
      integritysetup to not recognize the dm-integrity device.
      Integritysetup now specifies kernel options such a way that
      even on unpatched kernels mapping table is correct.
    * Print error message if LUKS1 keyslot cannot be processed.
      If the crypto backend is missing support for hash algorithms
      used in PBKDF2, the error message was not visible.
    * Properly align LUKS2 keyslots area on conversion.
      If the LUKS1 payload offset (data offset) is not aligned
      to 4 KiB boundary, new LUKS2 keyslots area in now aligned properly.
    * Validate LUKS2 earlier on conversion to not corrupt the device
      if binary keyslots areas metadata are not correct.


author: andreas.stieger@gmx.de
changelog:
  - Update to 2.3.3:
    * Fix BitLocker compatible device access that uses native 4kB
      sectors
    * Support large IV count (--iv-large-sectors) cryptsetup option
      for plain device mapping
    * Fix a memory leak in BitLocker compatible handling
    * Allow EBOIV (Initialization Vector algorithm) use
    * LUKS2: Require both keyslot cipher and key size option, do
      not fail silently
  - includes changes from 2.3.2:
    * Add option to dump content of LUKS2 unbound keyslot
    * Add support for discards (TRIM) for standalone dm-integrity
      devices (Kernel 5.7) via --allow-discards, not for LUKS2
    * Fix cryptsetup-reencrypt to work on devices that do not allow
      direct-io device access.
    * Fix a crash in the BitLocker-compatible code error path
    * Fix Veracrypt compatible support for longer (>64 bytes)
      passphrases


author: lnussel@suse.de
changelog:
  - Update to 2.3.4:
    * Fix a possible out-of-bounds memory write while validating LUKS2 data
      segments metadata (CVE-2020-14382, boo#1176128).
    * Ignore reported optimal IO size if not aligned to minimal page size.
    * Added support for new no_read/write_wrokqueue dm-crypt options (kernel 5.9).
    * Added support panic_on_corruption option for dm-verity devices (kernel 5.9).
    * Support --master-key-file option for online LUKS2 reencryption
    * Always return EEXIST error code if a device already exists.
    * Fix a problem in integritysetup if a hash algorithm has dash in the name.
    * Fix crypto backend to properly handle ECB mode.
    * TrueCrypt/VeraCrypt compatible mode now supports the activation of devices
      with a larger sector.
    * LUKS2: Do not create excessively large headers.
    * Fix unspecified sector size for BitLocker compatible mode.
    * Fix reading key data size in metadata for BitLocker compatible mode.


author: andreas.stieger@gmx.de
changelog:
  - cryptsetup 2.3.5:
    * Fix partial reads of passphrase from an interactive terminal
    * Fix maximum length of password entered through a terminal
    * integritysetup: support new dm-integrity HMAC recalculation
      options
    * integritysetup: display of recalculating sector in dump command
    * veritysetup: fix verity FEC if stored in the same image with
      hashes
    * veritysetup: run FEC repair check even if root hash fails
    * veritysetup: do not process hash image if hash area is empty
    * veritysetup: store verity hash algorithm in superblock in
      lowercase
    * bitlk: fix a crash if the device disappears during BitLocker
      scan
    * bitlk: show a better error when trying to open an NTFS device
    * bitlk: add support for startup key protected VMKs
    * Fix LUKS1 repair code (regression since version 1.7.x)
    * Fix luksKeyChange for LUKS2 with assigned tokens
    * Fix cryptsetup resize using LUKS2 tokens
    * Print a visible error if device resize is not supported
    * Add error message when suspending wrong non-LUKS device
    * Fix default XTS mode key size in reencryption
    * Rephrase missing locking directory warning and move it to
      debug level
    * Many fixes for the use of cipher_null (empty debug cipher)
    * Fixes for libpasswdqc 2.0.x (optional passphrase quality check)
    * Fixes for problems discovered by various tools for code
      analysis
    * Various fixes to man pages
  - silence hmac packaging warnings


author: lnussel@suse.de
changelog:
  - cryptsetup 2.3.6:
    * integritysetup: Fix possible dm-integrity mapping table truncation.
    * cryptsetup: Backup header can be used to activate TCRYPT device.
      Use --header option to specify the header.
    * cryptsetup: Avoid LUKS2 decryption without detached header.
      This feature will be added later and is currently not supported.
    * Additional fixes and workarounds for common warnings produced
      by some static analysis tools (like gcc-11 analyzer) and additional
      code hardening.
    * Fix standalone libintl detection for compiled tests.
    * Add Blake2b and Blake2s hash support for crypto backends.
      Kernel and gcrypt crypto backend support all variants.
      OpenSSL supports only Blake2b-512 and Blake2s-256.
      Crypto backend supports kernel notation e.g. "blake2b-512".


author: lnussel@suse.de
changelog:
  - cryptsetup 2.3.7:
    * Fix possible attacks against data confidentiality through LUKS2 online
    reencryption extension crash recovery (CVE-2021-4122).
    * Improve internal metadata validation code for reencryption metadata.
    * Add updated documentation for LUKS2 On-Disk Format Specification


author: ghe@suse.com
changelog:
  - Add metadata-based autoactivation property for VG and LV (bsc#1178680)
    + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch


author: heming.zhao@suse.com
changelog:
  - LVM cannot be disabled on boot (bsc#1184687)
    + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - Update patch for avoiding apply warning message
    + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch


author: heming.zhao@suse.com
changelog:
  - Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
    + bug-1185190_01-pvscan-support-disabled-event_activation.patch
    + bug-1185190_02-config-improve-description-for-event_activation.patch


author: wolfgang.frisch@suse.com
changelog:
  - Link test as position independent executable (bsc#1184124).
    + bug-1184124-link-tests-as-PIE.patch


author: heming.zhao@suse.com
changelog:
  - vgextend crash when extending VG with missing PV (bsc#1191019)
    + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch


author: heming.zhao@suse.com
changelog:
  - starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
    + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
    + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch


author: mwilck@suse.com
changelog:
  - udev: create symlinks and watch even in suspended state (bsc#1195231)
    + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch


author: heming.zhao@suse.com
changelog:
  - lvm2.spec %post deletes libdevmapper and triggers kernel panic (bsc#1198523)
    - change %post behaviour, only do deleting job for non-link folder


author: heming.zhao@suse.com
changelog:
  - dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
    - in lvm2.spec, change device_mapper_version from 1.02.163 to %{lvm2_version}_1.02.163


author: amit.chaudhary@suse.com
changelog:
  - killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
    - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch


author: pmonrealgonzalez@suse.com
changelog:
  - Security fix (CVE-2018-20843, bsc#1139937)
    * Large number of colons in input makes parser consume high
      amount of resources
    * Added expat-CVE-2018-20843.patch


author: pmonrealgonzalez@suse.com
changelog:
  - Security fix (CVE-2019-15903, bsc#1149429)
    * Crafted XML input results in heap-based buffer over-read by fooling
      the parser into changing from DTD parsing to document parsing
    * Added patches:
    - expat-CVE-2019-15903.patch
    - expat-CVE-2019-15903-tests.patch


author: david.anes@suse.com
changelog:
  - Security fix (CVE-2021-45960, bsc#1194251)
    * A left shift by 29 (or more) places in the storeAtts function
      in xmlparse.c can lead to realloc misbehavior.
    * Added expat-CVE-2021-45960.patch
  - Security fix (CVE-2021-46143, bsc#1194362)
    * Integer overflow exists for m_groupSize in doProlog
    * Added expat-CVE-2021-46143.patch
  - Security fix (CVE-2022-22822, bsc#1194474)
    * Integer overflow in addBinding in xmlparse.c
    * Added expat-CVE-2022-22822.patch
  - Security fix (CVE-2022-22823, bsc#1194476)
    * Integer overflow in build_model in xmlparse.c
    * Added expat-CVE-2022-22823.patch
  - Security fix (CVE-2022-22824, bsc#1194477)
    * Integer overflow in defineAttribute in xmlparse.c
    * Added expat-CVE-2022-22824.patch
  - Security fix (CVE-2022-22825, bsc#1194478)
    * Integer overflow in lookup in xmlparse.c
    * Added expat-CVE-2022-22825.patch
  - Security fix (CVE-2022-22826, bsc#1194479)
    * Integer overflow in nextScaffoldPart in xmlparse.c
    * Added expat-CVE-2022-22826.patch
  - Security fix (CVE-2022-22827, bsc#1194480)
    * Integer overflow in storeAtts in xmlparse.c
    * Added expat-CVE-2022-22827.patch
  - Refresh expat-CVE-2018-20843.patch as a p1 patch.
  - Use %autosetup macro


author: david.anes@suse.com
changelog:
  - Security fix (CVE-2022-23852, bsc#1195054)
    * Expat (aka libexpat) before 2.4.4 has a signed integer overflow
      in XML_GetBuffer, for configurations with a nonzero
      XML_CONTEXT_BYTES
    * Add tests for CVE-2022-23852.
    * Added expat-CVE-2022-23852.patch
  - Security fix (CVE-2022-23990, bsc#1195217)
    * Fix unsigned integer overflow in function doProlog triggered
      by large content in element type declarations when there is
      an element declaration handler present (from a prior call to
      XML_SetElementDeclHandler).
    * Add expat-CVE-2022-23990.patch


author: david.anes@suse.com
changelog:
  - Security fixes:
    * (CVE-2022-25236, bsc#1196025) Expat before 2.4.5 allows
      attackers to insert namespace-separator characters into
      namespace URIs
    - Added expat-CVE-2022-25236.patch
    * (CVE-2022-25235, bsc#1196026) xmltok_impl.c in Expat before
      2.4.5 does not check whether a UTF-8 character is valid in a
      certain context.
    - Added expat-CVE-2022-25235.patch
    * (CVE-2022-25313, bsc#1196168) Stack exhaustion in
      build_model() via uncontrolled recursion
    - Added expat-CVE-2022-25313.patch
    - The fix upstream introduced a regression that was later
      amended in 2.4.6 version
      + Added expat-CVE-2022-25313-fix-regression.patch
    * (CVE-2022-25314, bsc#1196169) Integer overflow in copyString
    - Added expat-CVE-2022-25314.patch
    * (CVE-2022-25315, bsc#1196171) Integer overflow in storeRawNames
    - Added expat-CVE-2022-25315.patch


author: david.anes@suse.com
changelog:
  - Security fixes:
    * (CVE-2022-25236, bsc#1196784) [>=2.4.5] Fix to CVE-2022-25236
      breaks biboumi, ClairMeta, jxmlease, libwbxml,
      openleadr-python, rnv, xmltodict
    - Added expat-CVE-2022-25236-relax-fix.patch


author: david.anes@suse.com
changelog:
  - Security fix:
    * (CVE-2022-40674, bsc#1203438) use-after-free in the doContent
      function in xmlparse.c
    - Added patch expat-CVE-2022-40674.patch


author: david.anes@suse.com
changelog:
  - Security fix:
    * (CVE-2022-43680, bsc#1204708) use-after free caused by overeager
      destruction of a shared DTD in XML_ExternalEntityParserCreate in
      out-of-memory situations
    - Added patch expat-CVE-2022-43680.patch


author: bruno@ioda-net.ch
changelog:
  - Update to 0.10 version :
    * Add a json_object_to_json_string_ext() function to allow output
    to be formatted in a more human readable form.
    * Add json_object_object_get_ex(), a NULL-safe get object method,
    to be able to distinguish between a key not present and the value
    being NULL.
    * Add an alternative iterator implementation, see json_object_iterator.h
    * Make json_object_iter public to enable external use of the
      json_object_object_foreachC macro.
    * Add a printbuf_memset() function to provide an effecient way to set and
      append things like whitespace indentation.
    * Adjust json_object_is_type and json_object_get_type so they return
      json_type_null for NULL objects and handle NULL passed to
      json_objct_object_get().
    * Rename boolean type to json_bool.
    * Fix various compile issues for Visual Studio and MinGW.
    * Allow json_tokener_parse_ex() to be re-used to parse multiple object.
      Also, fix some parsing issues with capitalized hexadecimal numbers and
      number in E notation.
    * Add json_tokener_get_error() and json_tokener_error_desc() to better
      encapsulate the process of retrieving errors while parsing.
    * Various improvements to the documentation of many functions.
    * Add new json_object_array_sort() function.
    * Fix a bug in json_object_get_int(), which would incorrectly return 0
      when called on a string type object.
      Eric Haszlakiewicz
    * Add a json_type_to_name() function.
      Eric Haszlakiewicz
    * Add a json_tokener_parse_verbose() function.
      Jehiah Czebotar
    * Improve support for null bytes within JSON strings.
      Jehiah Czebotar
    * Fix file descriptor leak if memory allocation fails in json_util
      Zachary Blair, zack_blair at hotmail dot com
    * Add int64 support. Two new functions json_object_net_int64 and
      json_object_get_int64. Binary compatibility preserved.
      Eric Haszlakiewicz, EHASZLA at transunion com
      Rui Miguel Silva Seabra, rms at 1407 dot org
    * Fix subtle bug in linkhash where lookup could hang after all slots
      were filled then successively freed.
      Spotted by Jean-Marc Naud, j dash m at newtraxtech dot com
    * Make json_object_from_file take const char *filename
      Spotted by Vikram Raj V, vsagar at attinteractive dot com
    * Add handling of surrogate pairs (json_tokener.c, test4.c, Makefile.am)
      Brent Miller, bdmiller at yahoo dash inc dot com
    * Correction to comment describing printbuf_memappend in printbuf.h
      Brent Miller, bdmiller at yahoo dash inc dot com
  - Packaging :
    * upgrade upstream location https://gitub.com/json-c/json-c/wiki
    * cleanup old patches included now upstream
    . json-c-0.9-linkhash.patch
    . json-c-0.9-json_tokener.patch
    . json-c-0.9-json_object_from_file.patch
    . json-c-0.9-base.patch
    * Redone lfs patch against new 0.10 release
    * Removed empty NEWS file


author: fstrba@suse.com
changelog:
  - Upgrade to 0.11 version:
    - SONAME change.
    - Fix provides and obsoletes accordingly
    - symlink the .pc file to the oldname for software that needs it
  - Remove json-c-fix-headers.patch integrated upstream


author: idonmez@suse.com
changelog:
  - Add json-c-hash-dos-and-overflow-random-seed-4e.patch to fix
    CVE-2013-6370 and CVE-2013-6371 (bnc#870147)


author: andreas.stieger@gmx.de
changelog:
  - json-c 0.12
    Fixes for security issues contained in this release have been
    previously patched into this package, but listed for completeness:
    * Address security issues:
    * CVE-2013-6371: hash collision denial of service
    * CVE-2013-6370: buffer overflow if size_t is larger than int
  - Further changes:
    * Avoid potential overflow in json_object_get_double
    * Eliminate the mc_abort() function and MC_ABORT macro.
    * Make the json_tokener_errors array local.  It has been deprecated for
      a while, and json_tokener_error_desc() should be used instead.
    * change the floating point output format to %.17g so values with
      more than 6 digits show up in the output.
    * Remove the old libjson.so name compatibility support.  The library is
      only created as libjson-c.so now and headers are only installed
      into the ${prefix}/json-c directory.
    * When supported by the linker, add the -Bsymbolic-functions flag.
    * Make strict mode more strict:
    * number must not start with 0
    * no single-quote strings
    * no comments
    * trailing char not allowed
    * only allow lowercase literals
    * Added a json_object_new_double_s() convenience function to allow
      an exact string representation of a double to be specified when
      creating the object and use it in json_tokener_parse_ex() so
      a re-serialized object more exactly matches the input.
    * Add support NaN and Infinity
  - packaging changes:
    * json-c-hash-dos-and-overflow-random-seed-4e.patch is upstream
    * Move from json-c-lfs.patch which removed warning errors and
      autoconf call to json-c-0.12-unused_variable_size.patch from
      upstream which fixes the warning
    * except for SLE 11 where autoreconf call is required
    * add licence file to main package


author: rpm@fthiessen.de
changelog:
  - Update to upstream release 0.12.1
  - Removed upstream fixed json-c-0.12-unused_variable_size.patch
  - Added fix-set-but-not-used.patch


author: avindra@opensuse.org
changelog:
  - json-c 0.13
    + Deprecated and removed features:
    * Internal use of bits.h has been eliminated.
    * lh_abort() is deprecated
    + Behavior changes:
    * Tighten the number parsing algorithm to raise errors instead
      of truncating the results.  For example 12.3.4 or 2015-01-15,
      which now return null.
    * Use size_t for array length and size. Platforms where
      sizeof(size_t) != sizeof(int) may not be backwards compatible
    * Check for failue when allocating memory, returning NULL and
      errno=ENOMEM.
    * Change json_object_object_add() return type from void to int,
      and will return -1 on failures, instead of exiting. (Note:
      this is not an ABI change)
    + New features:
    * Aiming to follow RFC 7159 now.
    * Support for JSON pointer, RFC 6901 (see json_pointer.h)
    * Add a couple of additional option to json_object_to_json_string_ext:
    JSON_C_TO_STRING_PRETTY_TAB
    JSON_C_TO_STRING_NOSLASHESCAPE
    * json_object_object_add_ex() - better perf when certain
      constraints are known to be true
    * Serialization format of doubles now configurable
    * New functions
    - json_object_equal() - utility function for comparing
      json_objects
    - json_object_deep_copy() - a way to copy entire object
      trees
    - json_object_set_<type>() - modify the value of
      existing json_object's without the need to recreate them.
    Also add a json_object_int_inc function to adjust an int's'
    value.
    - json_util_get_last_err() - retrieve the string describing
      the cause of errors, instead of printing to stderr.
    - perllike hash function for strings
    * json_global_set_string_hash()
    * json_c_visit() - a way to iterate over a tree of json-c
      objects.
    + Notable bug fixes and other improvements:
    * Make reference increment and decrement atomic to allow
      passing json objects between threads.
    * Fix json_object_object_foreach to avoid uninitialized
      variable warnings.
    * Improve performance by removing unneeded data items from
      hashtable code and reducing duplicate hash computation.
    * Performance: store small strings inside json_object
    * Performance: of json_object_to_json_string by removing
      variadic printf
    * Fix parsing of "-Infinity", and avoid needlessly copying the
      input when doing so.
    * Fix stack buffer overflow in json_object_double_to_json_string_format()
    * Fix various potential null ptr deref and int32 overflows
    * Fix a long-standing bug in array_list_put_idx() where it
      would attempt to free previously free'd entries due to not
      checking the current array length.
    * use uselocale() instead of setlocale() in json_tokener to
      behave better in threaded environments.
    * Fix out of bounds read when handling unicode surrogate pairs.
    * Ensure doubles that happen to be a whole number are emitted
      with ".0"
    * Visual Studio: use a snprintf/vsnprintf wrapper that ensures
      the string is terminated.
    * Fix double to int cast overflow in json_object_get_int64.
    * Clamp double to int32 when narrowing in json_object_get_int.
    * Use strtoll() to parse ints - instead of sscanf
    * usual code linting
    + Build changes:
    * Add Appveyor and Travis build support
    * Support for MacOS and Windows through CMake
    * Silent build by default
    * Link against libm when needed
    * Add support for building with AddressSanitizer
    * Add support for building with Clang
    * Add a --enable-threading configure option, and only use the
      (slower) __sync_add_and_fetch()/__sync_sub_and_fetch()
      function when it is specified.
  - cleanup with spec-cleaner
  - remove fix-set-but-not-used.patch
    + fixed: https://github.com/json-c/json-c/issues/240
  - remove gcc7-fix.patch
    + fixed in 014924ba899f659917bb64392bbff7d3c803afc2


author: ncutler@suse.com
changelog:
  - Add patch bsc1171479.patch
    + fix integer overflow and out-of-bounds write (CVE-2020-12762, bsc#1171479)


author: abergmann@suse.com
changelog:
  - Initial release 0.13.0.
    A library and tools to access the kernel crypto api.
    FATE#323554 bsc#1045948


author: jengelh@inai.de
changelog:
  - Compact descriptions a bit
  - Remove libkcapi provide/requires
  - Use %_libdir throughout and avoid /lib


author: meissner@suse.com
changelog:
  - libkcapi-use-external-fipshmac.patch: use external fipshmac,
    our chroots / vm builds do not necessarily have the right kernel.


author: bwiedemann@suse.com
changelog:
  - Add reproduciblesort.patch to always link .o files in the same order and
  - Add reproducibledate.patch to not add current time to man-pages to fix build-compare


author: astieger@suse.com
changelog:
  - pcre2 10.23:
    * major re-factoring of the pcre2_compile.c file
    * Back references are now permitted in lookbehind assertions when
      there are no duplicated group numbers (that is, (?| has not
      been used), and, if the reference is by name, there is only one
      group of that name. The referenced group must, of course be of
      fixed length.
    * \g{+<number>} (e.g. \g{+2} ) is now supported. It is a "forward
      back reference" and can be useful in repetitions
      (compare \g{-<number>} ). Perl does not recognize this syntax.
    * pcre2grep now automatically expands its buffer up to a maximum
      set by --max-buffer-size.
    * The -t option (grand total) has been added to pcre2grep.
    * A new function called pcre2_code_copy_with_tables() exists to
      copy a compiled pattern along with a private copy of the
      character tables that is uses.


author: astieger@suse.com
changelog:
  - pcre2grep can now read .gz and .bz2 files directly
  - pcre2test is now built to support line editing


author: jengelh@inai.de
changelog:
  - Update to new upstream release 10.30
    * The main interpreter, pcre2_match(), has been refactored into
      a new version that does not use recursive function calls for
      remembering backtracking positions. The new implementation
      allows backtracking into recursive group calls in patterns,
      making it more compatible with Perl. For patterns that have a
      lot of backtracking, the heap is now used, and there is
      explicit limit on the amount, settable by
      pcre2_set_heap_limit(). The "recursion limit" is retained,
      but is renamed as "depth limit".
    * The new option PCRE2_ENDANCHORED insists that a pattern match
      must end at the end of the subject.
    * The new option PCRE2_EXTENDED_MORE implements Perl's /xx
      feature, and pcre2test is upgraded to support it. Setting
      within the pattern by (?xx) is Also supported.
    * (?n) can be used to set PCRE2_NO_AUTO_CAPTURE, because Perl
      now has this.
    * Additional pattern compile options in the compile context are
      now available: PCRE2_EXTRA_ALLOW_SURROGATE_ESCAPES and
      PCRE2_EXTRA_BAD_ESCAPE_IS LITERAL.
    * The newline type PCRE2_NEWLINE_NUL is now available.
    * The match limit value now also applies to pcre2_dfa_match()
      as there are patterns that can use up a lot of resources
      without necessarily recursing very deeply.
    * Various minor security fixes found by fuzzers:
      + bsc#1037165: crash for forward reference in lookbehind with
      PCRE2_ANCHORED
      + CVE-2017-8786: heap-based buffer overflow write in pcre2test
      (bsc#1036942)
      + CVE-2017-7186: DoS by triggering an invalid Unicode property
      lookup (bsc#1030066)
  - Switch source URLs to use HTTP.


author: avindra@opensuse.org
changelog:
  - Update to new upstream release 10.31
    * New pcre2_config() options: PCRE2_CONFIG_NEVER_BACKSLASH_C and
      PCRE2_CONFIG_COMPILED_WIDTHS.
    * New pcre2_pattern_info() option PCRE2_INFO_EXTRAOPTIONS to
      retrieve the extra compile time options.
    * Public names for all pcre2_compile() error numbers.
    * Added PCRE2_CALLOUT_STARTMATCH and PCRE2_CALLOUT_BACKTRACK
      bits to a new field callout_flags in callout blocks.
  - use https for main site
  - cleanup with spec-cleaner


author: jsikes@suse.com
changelog:
  - Added 0001-Fixed-atomic-group-backtracking-bug.patch
    * bsc#1187937
    * PHP 7.6.4 on s390x returns different results for preg_match
      function as compared to older PHP versions and x86
    * Sourced from upstream subversion commit:
      $ svn log -r965 svn://vcs.pcre.org/pcre2/code/trunk


author: jsikes@suse.com
changelog:
  - Added pcre2-10.31-bsc1199232-unicode-property-matching.patch
    * bsc#1199232 / CVE-2022-1586
    * Fixes unicode property matching issue


author: jsikes@suse.com
changelog:
  - Added pcre2-Fix_crash_when_X_is_used_without_UTF_in_JIT.patch
    * CVE-2019-20454 / bsc#1164384
    * Fix crash when \X is used in non-UTF mode on certain inputs.
    * Sourced from:
    - https://github.com/PCRE2Project/pcre2/commit/342c16ecd31bd12fc350ee31d2dcc041832ebb3f
    - https://github.com/PCRE2Project/pcre2/commit/e118e60a68f03f38dd2ff3d16ca2e2e0d800e1d9


author: jsikes@suse.com
changelog:
  - Added pcre2-bsc1199235-CVE-2022-1587.patch
    * CVE-2022-1587 / bsc#1199235
    * Fix out-of-bounds read due to bug in recursions
    * Sourced from:
    - https://github.com/PCRE2Project/pcre2/commit/03654e751e7f0700693526b67dfcadda6b42c9d0


author: mcepl@suse.com
changelog:
  - Don't use appstream-glib on SLE-12.
  - Use Python 2-based Sphinx on SLE-12.
  - No documentation on SLE-12.
  - Add skip_SSL_tests.patch skipping tests because of patched
    OpenSSL (bpo#9425).


author: mcepl@suse.com
changelog:
  - Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
    CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
    command injection in the mailcap module.
  - Rename support-expat-245.patch to
    support-expat-CVE-2022-25236-patched.patch to unify the patch
    with other packages.
  - Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
    on s390x.


author: steven.kowalik@suse.com
changelog:
  - Add patch CVE-2021-28861-double-slash-path.patch:
    * http.server: Fix an open redirection vulnerability in the HTTP server
      when an URI path starts with //. (bsc#1202624, CVE-2021-28861)


author: mcepl@suse.com
changelog:
  - Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
    CVE-2020-10735 (bsc#1203125) to limit amount of digits
    converting text to int and vice vera (potential for DoS).
    Originally by Victor Stinner of Red Hat.


author: mcepl@suse.com
changelog:
  - Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
    bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
    overflow in hashlib.sha3_* implementations (originally from the
    XKCP library).


author: mcepl@suse.com
changelog:
  - Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
    the garbage collection (bsc#1188607).


author: fcrozat@suse.com
changelog:
  - Remove buildrequires on libSDL-devel, only required when running
    autoreconf, which is not needed at all now.


author: cgiboudeaux@gmx.com
changelog:
  - Update to 3.4.1
    * A bug that mutual exclusion was not performed has been fixed
    * Colored QR Code support
    * SVG, UTF8, and ANSIUTF8 output supports have been added to the command line tool.


author: cgiboudeaux@gmx.com
changelog:
  - Fix the SLES build:
    * Replace 'pkgconfig(libpng)'
    * Replace %make_install
    * BuildRequires: pkg-config


author: asterios.dramis@gmail.com
changelog:
  - Update to 3.4.2:
    * Memory leak bug has been fixed.
    * Micro QR Code encoding bug has been fixed.
    * String splitting has been improved.
  - Removed qrencode-libpng16.patch (fixed upstream).


author: asterios.dramis@gmail.com
changelog:
  - Update to 3.4.3:
    * New option "--rle" has been added to the command line tool.
    * Bug fixes in the library and command line tool.


author: cgiboudeaux@gmx.com
changelog:
  - Update to 3.4.4
    * Bugfix release. See the changelog file for the list of changes.
    * New option "--verbose" has been added to the command line tool.


author: tchvatal@suse.com
changelog:
  - Switch to github as an url so people can see the progress
    * web is not really up-to-date
  - Remove compat support for sle11


author: christophe@krop.fr
changelog:
  - Update to 4.0.0
    * EPS output now supports foreground and background color
    * XPM and PNG32 support added
    * CMake support added
    * Various bugs and performance fixes
  - Add qrencode-fix-installation.patch. Fixes installation for x86_64
    targets.


author: rhafer@suse.com
changelog:
  - Update to release 2.5.0
    * Add support for the seccomp user notifications, see the
      seccomp_notify_alloc(3), seccomp_notify_receive(3),
      seccomp_notify_respond(3) manpages for more information
    * Add support for new filter optimization approaches, including a balanced
      tree optimization, see the SCMP_FLTATR_CTL_OPTIMIZE filter attribute for
      more information
    * Add support for the 64-bit RISC-V architecture
    * Performance improvements when adding new rules to a filter thanks to the
      use of internal shadow transactions and improved syscall lookup tables
    * Properly document the libseccomp API return values and include them in the
      stable API promise
    * Improvements to the s390 and s390x multiplexed syscall handling
    * Multiple fixes and improvements to the libseccomp manpages
    * Moved from manually maintained syscall tables to an automatically generated
      syscall table in CSV format
    * Update the syscall tables to Linux v5.8.0-rc5
    * Python bindings and build now default to Python 3.x
    * Improvements to the tests have boosted code coverage to over 93%
  - libseccomp.keyring: replaced by Paul Moore <pmoore@redhat.com> key.


author: schwab@suse.de
changelog:
  - testsuite-riscv64-missing-syscalls.patch: Fix testsuite failure on
    riscv64
  - Ignore failure of tests/52-basic-load on qemu linux-user emulation


author: dimstar@opensuse.org
changelog:
  - Do not rely on gperf: pass GPERF=/bin/true to configure and
    remove gperf BuildRequires. The syscalls.perf file it would
    generate is part of the tarball already.


author: dmueller@suse.com
changelog:
  - update to 2.5.1:
    * Fix a bug where seccomp_load() could only be called once
    * Change the notification fd handling to only request a notification fd if
    * the filter has a _NOTIFY action
    * Add documentation about SCMP_ACT_NOTIFY to the seccomp_add_rule(3) manpage
    * Clarify the maintainers' GPG keys
  - remove testsuite-riscv64-missing-syscalls.patch


author: jengelh@inai.de
changelog:
  - Update to release 2.5.2
    * Update the syscall table for Linux v5.14-rc7
    * Add a function, get_notify_fd(), to the Python bindings to
      get the nofication file descriptor.
    * Consolidate multiplexed syscall handling for all
      architectures into one location.
    * Add multiplexed syscall support to PPC and MIPS
    * The meaning of SECCOMP_IOCTL_NOTIF_ID_VALID changed within
      the kernel. libseccomp's fd notification logic was modified
      to support the kernel's previous and new usage of
      SECCOMP_IOCTL_NOTIF_ID_VALID.


author: jengelh@inai.de
changelog:
  - Update to release 2.5.3
    * Update the syscall table for Linux v5.15
    * Fix issues with multiplexed syscalls on mipsel introduced in v2.5.2
    * Document that seccomp_rule_add() may return -EACCES


author: mrueckert@suse.de
changelog:
  - reenable python bindings at least for the distro default python3
    package:
    - adds make-python-build.patch


author: meissner@suse.com
changelog:
  - check if we have NR_openat2, avoid using its definition when not
    (bsc#1196825)
    Added seccomp-openat2.patch


author: mliska@suse.cz
changelog:
  - Update to version 4.4.3:
    * Add libxcrypt.so, libxcrypt.a and xcrypt.h.
    * Add new man3 manual pages.


author: schwab@suse.de
changelog:
  - Update to version 4.4.10
    * Fix alignment problem for GOST 34.11 (Streebog) in gost-yestcrypt.
    * The crypt_* functions will now all fail and set errno to ERANGE if
      their 'phrase' argument is longer than CRYPT_MAX_PASSPHRASE_SIZE
      characters (this is currently 512)
    * The NT hashing method no longer truncates passphrases at 128
      characters; Windows does not do this.
  - format-overflow.patch: remove


author: schwab@suse.de
changelog:
  - Update to version 4.4.11
    * Fixes for GCC v10.x
    * Change how the known-answer tests are parallelized
  - gcc10.patch: remove


author: schwab@suse.de
changelog:
  - Update to version 4.4.15
    * The compatibility symbols crypt_gensalt_r, xcrypt, xcrypt_r,
      xcrypt_gensalt, and xcrypt_gensalt_r are deprecated further
    * Speed up ka-sunmd5 by skipping most of the test phrases
  - Package README.md and TODO.md (bsc#1165389)


author: bwiedemann@suse.com
changelog:
  - Don't embed build system's kernel version in rpm
    to make package build reproducible (boo#1101107)


author: schwab@suse.de
changelog:
  - Update to kernel headers 4.20
  - netfilter-bridge-define-INT_MIN-INT_MAX-in-userspace.patch: remove


author: kukuk@suse.de
changelog:
  - Update to version 0.93: Teach pam_cracklib module about
    enforce_for_root [bnc#929079, FATE#312643].


author: kukuk@suse.de
changelog:
  - Update to version 1.0:
    - Add search in different locations for config files
    - Add support for pam_mktemp [bsc#1123878]


author: josef.moellers@suse.com
changelog:
  - prior to writing an service-specific config file, the main function
    calls access() on the destination file in /etc/pam.d.
    This will fail and no config file will be written when the original
    config file was installed in /usr/etc/pam.d.
    A similar problem exists when creating the new service file:
    create_service_file() wants to give the new service file the same
    user, group and mode as the old one, but the old one may not exist.
    In that case, set these to 0(root), 0(root), and 0644.
    [pam-config-remove-bad-access-call.patch, bsc#1187091]


author: josef.moellers@suse.com
changelog:
  - Add "revoke" to the option list for pam_keyinit
    (Remove some leftover debugs while we're at it)
    [pam-config-fix-pam_keyinit-options.patch]


author: wfeldt@opensuse.org
changelog:
  - merge gh#openSUSE/perl-bootloader#129
  - Check tpm.mod in the new grub2 directory (bsc#1174320)
  - 0.931


author: wfeldt@opensuse.org
changelog:
  - merge gh#openSUSE/perl-bootloader#131
  - grub2 install: honor UPDATE_NVRAM in /etc/sysconfig/bootloader
    (bsc#1157550 jsc#SLE-11500).
  - 0.932


author: wfeldt@opensuse.org
changelog:
  - merge gh#openSUSE/perl-bootloader#133
  - use shim on aarch64 (jsc#SLE-15823, jsc#SLE-15020)
  - 0.933


author: wfeldt@opensuse.org
changelog:
  - merge gh#openSUSE/perl-bootloader#134
  - install with --removable if efivars are not writable
    (bsc#1182749, bsc#1174111, bsc#1184160)
  - fix whitespace
  - 0.934


author: wfeldt@opensuse.org
changelog:
  - merge gh#openSUSE/perl-bootloader#136
  - report error if config file could not be updated (bsc#1188768)
  - 0.936


author: wfeldt@opensuse.org
changelog:
  - merge gh#openSUSE/perl-bootloader#137
  - grub2 install: Support secure boot on powerpc (bsc#1192764
    jsc#SLE-18271).
  - 0.937


author: wfeldt@opensuse.org
changelog:
  - merge gh#openSUSE/perl-bootloader#138
  - grub2/install: reset error code when passing through recover code
    (bsc#1198197)
  - 0.938


author: sweet_f_a@gmx.de
changelog:
  - update to 2.2.5:
    * add --rsyncable functionality
    * many bug fixes
  - remove all suse patches:
    * pigz-dictzip.patch, large and unmaintained patch. If somebody
      really needs that then we should rebase and test it. In this
      case --dictzip should be probably also added to original gzip.
    * pigz-always-thread.patch was a folloup of pigz-dictzip.patch
    * pigz-do-symlinks.patch added IMO dangerous and stupid behaviour
      for symlinks. The original behaviour is now again like we know
      it from gzip, bzip2 and xz.
    * pigz-spl.patch, why we hacked in special handling of .spl
      files?
    * Generally we want to have pigz to replace gzip (and vice versa)
      so better avoiding interface incompatibilities.
  - cleanup spec file


author: adam@mizerski.pl
changelog:
  - update to 2.3
    * Don't complain about missing suffix when not writing output file
    * Put all global variables in one global structure for readability
    * Do not decompress concatenated zlib streams -- only gzip streams
    * Add option for compression level 11 to use zopfli
    * Fix handling of junk after compressed data
  - added pigz-lm.patch
    * adds missing "-lm"
  - provide unpigz binary and manpage as symlink, not copy.
  - removed fake cc script - build system honors CC
  - cleanup spec file


author: p.drouand@gmail.com
changelog:
  - Update to version 2.3.3
    * Portability improvements
    * Update copyright years in documentation
  - Add build fix patches
    * pigz-fix-wrong-include.patch
    * pigz-fix-missing-linker.patch
  - Remove pigz-lm.patch; fixed
  - Use download Url as source


author: dimstar@opensuse.org
changelog:
  - Update to version 0.27:
    + Drop usage of popt for equivalent API in glib2
    + Add back an internal snapshot of glib2 to break circular
      dependency
    + Fix --exists to check for Requires and Requires.private.
    + Various fixes for MinGW which should allow it to be used
      unpatched on that system
    + New autoconf macros PKG_INSTALLDIR and PKG_NOARCH_INSTALLDIR to
      help determine the .pc file install directory
    + Fix handling of --exact/atleast/max-version vs. =/>=/<=
    + Fix errors in man page source
    + Ensure testing only searches in the check directory
    + Bump glib requirement to 2.16 to avoid deprecated
      g_win32_get_package_installation_subdirectory()
    + Autotools refresh and update
    + Use g_alloca from glib instead of figuring out alloca ourselves
    + Remove search for setresuid & setreuid only needed for internal
      popt
    + Bugs fixed: fdo#833, fdo#2458, fdo#5214, fdo#5326, fdo#5703,
      fdo#6074, fdo#8653, fdo#9135, fdo#9143, fdo#9584, fdo#10652,
      fdo#11464, fdo#14396, fdo#17053, fdo#23922, fdo#28776,
      fdo#29011, fdo#29801, fdo#31699, fdo#31700, fdo#32622,
      fdo#34382, fdo#37266, fdo#39646, fdo#41081, fdo#43149,
      fdo#44843, fdo#45599, fdo#45742, fdo#48743
  - Changes from version 0.26:
    + Build system fixes
    + More tests
    + pkg.m4 fixups which makes autoconf 2.66 happier.
    + Drop support for legacy -config scripts.  Those should already
      be gone and cause problems in cross-compilation environments.
    + Drop embedded glib
    + Fix up pkg.m4 to handle the case of --exists working and
    - -cflags or --libs failing.
    + Various documentation updates
    + Allow $() through without escaping it.
    + Add --with-system-include-path instead of hard-coding
      /usr/include.
  - Pass --with-internal-glib to configure. We don't want to have a
    build cycle with glib, so we use the interal version.
  - Clean up spec-file using spec-cleaner and manually.
  - Drop pkg-config-dnl.patch: fixed upstream.


author: dimstar@opensuse.org
changelog:
  - Update to version 0.27.1:
    + Various fixes for using the internal glib snapshot. It should
      now be usable pretty much everywhere with the exception that
      universal builds are not supported on OS X.
    + Remove usage of gettext from the internal glib to avoid gettext
      and libintl dependencies
    + Update internal glib snapshot to 2.32.4
    + Fix check for POSIX shell used in tests to work better
    + Handle spaces in autodetected prefix on Windows
    + Bugs fixed: fdo#3550, fdo#51883, fdo#52031, fdo#53493.


author: p.drouand@gmail.com
changelog:
  - Update to version 0.28:
    + Fixed a pair of long-standing and intertwined bugs involving
      unwanted removal of flags:
    - Other Libs flags like -Wl are now kept in context order
      with -l flags.
    - Aggressive removal of all duplicate arguments has been scaled
      back so that just consecutive duplicate arguments are
      removed. One result of this change is that some flags could
      be repeated in the final output, especially flags from
      non-pkg-config packages like -lm. Since pkg-config rarely has
      enough knowledge here about the right thing to do, we throw
      the duplicate arguments at the compiler/linker and trust it
      will do the right thing.
    + Fixed an old bug to allow circular Requires. This fix brings
      along a small behavior change in that pkg-config resolves
      requires depth first, causing some lower level flags to show up
      earlier in the output than previously.
    + Cleaned up many corner-case bugs and ambiguous behavior in
      pkg-config's interface.
    + New autoconf macro PKG_CHECK_VAR for reading variables from .pc
      files.
    + Default to suppressing -L/lib and/or -L/lib64 like their /usr
      counterparts.
    + To help support multiarch scenarios out of the box,
      $host-pkg-config is now installed unless --disable-host-tool
      is passed to configure.
    + Added optional gcov usage through the --with-gcov configure
      option. As a result, many more tests were added to greatly
      increase the coverage of the code to 86% of executed lines on a
      Fedora 18 machine.
    + Bugs fixed: fdo#130, fdo#7331, fdo#16101, fdo#17053, fdo#19950,
      fdo#34504, fdo#48098, fdo#54231, fdo#54271, fdo#54379,
      fdo#54384, fdo#54386, fdo#54388, fdo#54389, fdo#54390,
      fdo#54391, fdo#54427, fdo#54463, fdo#54716, fdo#57078,
      fdo#58363, fdo#59435.


author: dvaleev@suse.com
changelog:
  - Don't redefine _arch, but use file pattern instead. This ensures
    we don't have to run fixing each and every arch.


author: zaitor@opensuse.org
changelog:
  - Update to version 0.29:
    + Fixed a regression from 0.28 in system -L flag handling. If the
      pc file has multiple system -L flags, every other flag will be
      left as is (fdo#78077).
    + Quoting of variables queried through --variable is removed so
      that the output can be used verbatim in subsequent shell
      commands (fdo#67904).
    + Fixed a regression from 0.28 in -L flag handling on Windows. A
      .libs suffix was inadvertantly being added to the library path.
    + Added a --validate option to check pc file syntax. This works
      just like --exists, but package dependencies are disabled
      (fdo#7000).
    + Added the PKG_PREREQ autoconf macro. Whereas
      PKG_PROG_PKG_CONFIG is used to check the version of the
      pkg-config tool, this is used to check the version of the
      pkg-config autoconf macros in use.
    + Added the PKG_CHECK_MODULES_STATIC autoconf macro. This will
      temporarily add --static to the pkg-config calls while invoking
      PKG_CHECK_MODULES (fdo#19541).
    + Many fixes to the testsuite for Windows. It should now pass for
      a MinGW, Cygwin, and cross-compiled MinGW using Wine for test
      execution (fdo#66939).
    + More consistent handling of prefix redefinition. On Windows,
      the prefix was always being redefined based on the pc file
      path. This feature can now be enabled or disabled at runtime on
      all platforms using the --define-prefix and
    - -dont-define-prefix options (fdo#63602).
    + Continue listing packages with --list-all even if there are
      errors in pc files (fdo#26615).
    + Various documentation improvements (fdo#62018, fdo#62374,
      fdo#66155).
    + Fixed a bug when multiple -isystem arguments are used
      (fdo#72584).
    + pkg-config is now built with largefile support to ensure that
      it works correctly on filesystems with 64 bit inodes
      (fdo#90078).
    + Bugs fixed: fdo#7000, fdo#19541, fdo#26615, fdo#62018,
      fdo#62374, fdo#63602, fdo#66155, fdo#66939, fdo#67904,
      fdo#70690, fdo#72584, fdo#78077, fdo#80378, fdo#80380,
      fdo#89267, fdo#90078, fdo#90437, fdo#92002.


author: zaitor@opensuse.org
changelog:
  - Update to version 0.29.1:
    + Fixed a regression from 0.29 with unquoting values queried with
    - -variable. In some cases, this would cause shell special
      characters to be escaped in ways they weren't before. Instead,
      the unquoting only occurs if the value appears to be quoted
      (fdo#93284).
    + Add support for building pkg-config with Microsoft Visual
      Studio (fdo#92489).
    + Allow overriding pkg-config variables with environment
      variables. By setting an environment variable of the form
      PKG_CONFIG_$PACKAGE_$VARIABLE, a pkg-config variable can be set
      globally without always having to pass --define-variable
      (fdo#90917).
    + Honor -Wl,-framework in addition to -framework so that multiple
      frameworks are handled on OSX (fdo#1278).
    + Fix the OSX build using --with-internal-glib (fdo#92902).


author: dimstar@opensuse.org
changelog:
  - Update to version 0.29.2:
    + Improved pkg-config's recursive package list expansion
      performance.
    + Handle an empty prefix setting correctly when --define-prefix
      is used (fdo#97453).
    + Lazily load pc files instead of reading all available pc files
      during initialization (fdo#98215).
    + Check the CPATH environment variable when determining system
      include paths like GCC does. Document the system search path
      behavior (fdo#99224).
    + Make PKG_CHECK_MODULES show the module list rather than the
      variable prefix in configure output (fdo#98334).
    + Fix bundled glib build with GCC 6 (fdo#98334).
    + Handle -isystem and -idirafter when PKG_CONFIG_SYSROOT_DIR is
      set (fdo#97337).
    + Check the INCLUDE environment variable when determining system
      include paths on Windows builds when --msvc-syntax is used
      (fdo#94729).
  - Drop pkg-config-gdate-fix.patch: fixed upstream.


author: mwilck@suse.com
changelog:
  - Update to version 15.3.6:
    * dm-crypt requires essiv in SLE15 SP3 (boo#1183063 bsc#1184134 ltc#192244).


author: mwilck@suse.com
changelog:
  - Update to version 15.3.8:
    * modprobe.d: Remove dma=none setting for parport_pc
      (bsc#1177695)


author: mwilck@suse.com
changelog:
  - Update to version 15.3.9:
    * fix problem that initrd may not be rebuilt after installing
      kernel-$flavor-extra (bsc#1189441)


author: mwilck@suse.com
changelog:
  - Update to version 15.3.10:
    * Import kernel scriptlets from kernel-source
      (bsc#1189841, bsc#1190598)
    * Provide "suse-kernel-rpm-scriptlets"


author: mwilck@suse.com
changelog:
  - Update to version 15.3.11:
    * inkmp-script(postun): don't pass  existing files to weak-modules2
      (boo#1191200)
    * kernel-scriptlets: skip cert scriptlet on non-UEFI systems
      (boo#1191260)


author: mwilck@suse.com
changelog:
  - Update to version 15.3.12:
    * rpm-script: fix bad exit status in OpenQA (bsc#1191922)
    * cert-script: Ignore kernel keyring for kernel certificates (bsc#1191480).


author: mwilck@suse.com
changelog:
  - Update to version 15.3.14:
    * add commit which was missing by mistake:
    * cert-script: Deal with existing $cert.delete file (bsc#1191804).


author: jfehlig@suse.com
changelog:
  - Add system account and groups for kvm, qemu, and libvirt
    (jsc#SLE-11629)
    New files: system-group-kvm.conf, system-group-libvirt.conf,
    system-user-qemu.conf


author: msuchanek@suse.com
changelog:
  - system-user-tss.conf: Remove group entry, not needed and did
    contain syntax errors (bsc#1190401).


author: fbui@suse.com
changelog:
  - Import commit 40960e1ccb15071355fd3ee922877ef51f34bdbc
    e6354ebb34 core/device: device_coldplug(): don't set DEVICE_DEAD
    b593249c00 core/device: do not downgrade device state if it is already enumerated
    7b47b3c306 core/device: ignore DEVICE_FOUND_UDEV bit on switching root (bsc#1137373 bsc#1181658 bsc#1194708 bsc#1195157 bsc#1197570)
    912c07c281 core/device: drop unnecessary condition


author: fbui@suse.com
changelog:
  - Import commit 0fb88066f5fa4695467e930559776cc3444773ec
    90740ae2aa string-util: explicitly cast character to unsigned
    ca1455c5b9 string-util: fix build error on aarch64
    c0829f98fc basic/escape: escape control characters, but not utf-8, in shell quoting
    387a2e1fbf basic/string-util: simplify how str_realloc() is used
    cdc4d55d22 basic/string-util: inline iterator variable declarations
    d435514c85 basic/string-util: split out helper function
    bdbc4faff5 basic/escape: always escape newlines in shell_escape()
    3eb13063d1 basic/escape: add mode where empty arguments are still shown as ""
    08fd20d8fb Flagsify EscapeStyle and make ESCAPE_BACKSLASH_ONELINE implicit
    ec07c1c46c basic/escape: use consistent location for "*" in function declarations
    074e1b622e Allow control characters in environment variable values (bsc#1200170)
    44e419dcb0 Revert "basic/env-util: (mostly) follow POSIX for what variable names are allowed"
    d5756f6f71 test-env-util: Verify that \r is disallowed in env var values
    d02bac33d3 basic/env-util: make function shorter
    c68d5f0ba6 basic/env-util: (mostly) follow POSIX for what variable names are allowed
    887c150a04 test-env-util: print function headers


author: fbui@suse.com
changelog:
  - Import commit e7211d27e1bd26b976aa74ff620cc22a0267b5b8
    1300e134a0 tmpfiles: check the directory we were supposed to create, not its parent
    e4bb32dc65 stat-util: replace is_dir() + is_dir_fd() by single is_dir_full() call
    d8d0c083bd logind: don't delay login for root even if systemd-user-sessions.service is not activated yet (bsc#1195059)


author: fbui@suse.com
changelog:
  - Update 1009-Drop-or-soften-some-of-the-deprecation-warnings.patch (jsc#PED-944)
    To decrease log level of messages about use of KillMode=none from warning to
    debug. SAP still uses this deprecated option and the warnings emitted by PID1
    confuse both SAP customers and support.


author: fbui@suse.com
changelog:
  - Import commit 56bee38fd0da18dad5fc5c5d12c02238a22b50e2
    42a26330fc time-util: fix buffer-over-run (bsc#1204968 CVE-2022-3821)
    8a70235d8a core: Add trigger limit for path units
    93e544f3a0 core/mount: also add default before dependency for automount mount units
    5916a7748c logind: fix crash in logind on user-specified message string


author: mwilck@suse.com
changelog:
  - 80-hotplug-cpu-mem.rules: restrict cpu rule to x86_64 (bsc#1204423)
    Also update the rule files to make use of the "CONST{arch}" syntax (available
    since v244).


author: fbui@suse.com
changelog:
  - Import commit b83846dc8a5db633cc6cf05a33ddc054f725214e
    4d53a5440f udev/net_id: show the correct identifier in the debug output of dev_pci_onboard()
    f70647a7b7 udev/net_id: add debug logging for construction of device names
    48f40fbc8e pid1: set SYSTEMD_NSS_DYNAMIC_BYPASS=1 env var for dbus-daemon (bsc#1203857)
    7e4434d883 docs: $SYSTEMD_NSS_BYPASS_BUS is not honoured anymore, don't document it
    2bdfc2d8cf pid1: lookup owning PID of BusName= name of services asynchronously
    dba888a4d3 pid1: watch bus name always when we have it
    f524807b89 udev: add one more assertion
    8558101c73 udev: drop assertion which is always false
    566a66dc5c udev: support by-path devlink for multipath nvme block devices (bsc#1200723)
    b4c4edaada tests: minor simplification in test-execute
    76d510c625 tests: make test-execute pass on openSUSE
  - Drop the following patches which are part of 'SUSE/v246' now:
      6000-udev-net_id-add-debug-logging-for-construction-of-de.patch
      6001-udev-net_id-show-the-correct-identifier-in-the-debug.patch


author: fbui@suse.com
changelog:
  - Fix systemd-coredump to not allow user to access coredumps with changed
    uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
    Add 5000-coredump-Fix-format-string-type-mismatch.patch
    Add 5001-coredump-drop-an-unused-variable.patch
    Add 5002-coredump-adjust-whitespace.patch
    Add 5003-coredump-do-not-allow-user-to-access-coredumps-with-.patch


author: fbui@suse.com
changelog:
  - Introduce "upstream" branding sub-package
    Installing this branding sub-package is supposed to restore upstream
    defaults by uninstalling all custom drop-ins installed by other
    branding sub-packages.


author: fbui@suse.com
changelog:
  - Import 0.3
    d299248 List drop-in directories in SUSE.list exclusively
    e4651a7 Disable memory accounting by default for all distros (jsc#PM-2229 jsc#PM-2230)


author: fbui@suse.com
changelog:
  - Import 0.4
    a97bb54 Makefile: don't generate the rpm file lists anymore
    5473da6 Makefile: introduce 'archive' target


author: fbui@suse.com
changelog:
  - Import 0.5
    0c5e241 SLE: turn off RemoveIPC by default for logind (fate#320125)
    cb6914f SLE: restore ProtectHostname=no for udevd (bsc#1178374)
    7e332a6 Add a header in all each drop-ins
    465e1c7 Makefile: simplify 'archive' target


author: zren@suse.com
changelog:
  - Enable lvm2-monitor.service by default (bsc#1072492)
  - Enable lvm2-lvmpolld.socket by default (bsc#1074211)


author: kukuk@suse.de
changelog:
  - Enable backup-rpmdb.timer, backup-sysconfig.timer and
    check-battery.timer, previously cron.daily jobs.


author: varkoly@suse.com
changelog:
  - spamassassin: migrate from cron to systemd timers (bsc#1115411)
    enable spamassassin.timer by default


author: jsegitz@suse.com
changelog:
  - Removed ixpdimm-monitor.service and readonly-root.service
    (bsc#1129270)
  - Added snapd.apparmor.service (bsc#1129435)


author: matthias.gerstner@suse.com
changelog:
  Cleanup of outdated autostart services (bsc#1171656):
  - Remove acpid.service. acpid is only available on SLE via openSUSE
    backports.  In openSUSE acpid.service is *not* autostarted. I see no
    reason why it should be on SLE.
  - Remove spamassassin.timer. This timer never seems to have existed.
    Instead spamassassin ships a "sa-update.timer". But it is not
    default-enabled and nobody ever complained about this.
  - Remove snapd.apparmor.service: This service was proactively added a year
    ago, but snapd didn't even make it into openSUSE yet. There's no reason
    to keep this entry unless snapd actually enters SLE which is not
    foreseeable.


author: fvogt@suse.com
changelog:
  - Don't enable btrfsmaintenance-refresh.service, btrfsmaintenance is
    managed by systemd-presets-common-SUSE instead (boo#1165780)


author: fvogt@suse.com
changelog:
  - Enable btrfsmaintenance-refresh.path and disable
    btrfsmaintenance-refresh.service to avoid needless refresh on boot
    (boo#1165780)


author: alarrosa@suse.com
changelog:
  - When installing the systemd-presets-common-SUSE package for the
    first time in a new system, it might happen that some services
    are installed before systemd so the %systemd_pre/post macros
    would not work. This is handled by enabling all preset services
    in this package's %posttrans section but it wasn't enabling
    user services, just system services. Now it enables also the
    user services installed before this package, thus fixing
    boo#1186561


author: alarrosa@suse.com
changelog:
  - Add the wireplumber user service preset to enable it by default
    in SLE15-SP4 where it replaced pipewire-media-session, but keep
    pipewire-media-session preset so we don't have to branch the
    systemd-presets-common-SUSE package for SP4 (boo#1200485)


author: alarrosa@suse.com
changelog:
  - Modify branding-preset-states to fix systemd-presets-common-SUSE
    not enabling new user systemd service preset configuration just
    as it handles system service presets. By passing an (optional)
    second parameter "user", the save/apply-changes commands now
    work with user services instead of system ones (boo#1200485)


author: sbrabec@suse.com
changelog:
  - Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
    bsc#1194976,
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).


author: sbrabec@suse.com
changelog:
  - Make uuidd lock state file usable and time based UUIDs safe again
    (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).


author: sbrabec@suse.com
changelog:
  - Prevent root owning of /var/lib/libuuid/clock.txt
    (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).


author: sbrabec@suse.com
changelog:
  - Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
    util-linux-libuuid-extend-cache.patch).


author: sbrabec@suse.com
changelog:
  - agetty: Resolve tty name even if stdin is specified (bsc#1197178,
    util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
  - libmount: When moving a mount point, update all sub mount entries
    in utab (bsc#1198731,
    util-linux-libmount-moving-mount-point-sub-mounts.patch,
    util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).


author: sbrabec@suse.com
changelog:
  - mesg: use only stat() to get the current terminal status
    (bsc#1200842, util-linux-mesg-use-only-stat.patch).


author: sbrabec@suse.com
changelog:
  - su: Change owner and mode for pty (bsc#1200842,
    util-linux-login-move-generic-setting-to-ttyutils.patch,
    util-linux-su-change-owner-and-mode-for-pty.patch).


author: sbrabec@suse.com
changelog:
  - libuuid improvements (bsc#1201959, PED-1150):
    * libuuid: Fix range when parsing UUIDs
      (util-linux-libuuid-uuid_parse-overrun.patch).
    * Improve cache handling for short running applications-increment
      the cache size over runtime
      (util-linux-libuuid-improve-cache-handling.patch).
    * Implement continuous clock handling for time based UUIDs
      (util-linux-libuuid-continuous-clock-handling.patch).
    * Check clock value from clock file to provide seamless libuuid
      update (util-linux-libuuid-check-clock-value.patch).


author: astieger@suse.com
changelog:
  - xz 5.2.3:
    * xz: always close a file before trying to delete it to avoid
      problems on some operating system and file system combinations.
    * C99/C11 conformance fixes to liblzma. The issues affected at
      least some builds using link-time optimizations.
    * Fixed bugs in the rarely-used function lzma_index_dup().
    * Use of external SHA-256 code is now disabled by default.
      It can still be enabled by passing --enable-external-sha256
    * Changed CPU core count detection to use sched_getaffinity() on
      GNU/Linux and GNU/kFreeBSD.
    * Fixes to the build-system


author: jengelh@inai.de
changelog:
  - % needs to be encoded in description; adjust weird indent there
    as well. Expand LZMA in summaries.


author: kstreitova@suse.com
changelog:
  - add SUSE-Public-Domain licence as some parts of xz utils (liblzma,
    xz, xzdec, lzmadec, documentation, translated messages, tests,
    debug, extra directory) are in public domain licence [bsc#1135709]


author: danilo.spinella@suse.com
changelog:
  - Fix ZDI-CAN-16587 Fix escaping of malicious filenames
    (ZDI-CAN-16587 bsc#1198062 CVE-2022-1271)
    * bsc1198062.patch


author: tchvatal@suse.com
changelog:
  - Update the zlib-no-version-check.patch to be even more forgiving
    with the versions on the zlib to allow updates without rebuilds


author: lidong.zhong@suse.com
changelog:
  - Permit a deflateParams() parameter change as soon as possible(bsc#1174736)
    * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
    Fix DFLTCC not flushing EOBS when creating raw streams(bsc#1174551)
    * bsc1174551-fxi-imcomplete-raw-streams.patch


author: tchvatal@suse.com
changelog:
  - Add patch to fix compression level switching
    bsc#1175811 bsc#1175830 bsc#1175831
    * zlib-compression-switching.patch


author: danilo.spinella@suse.com
changelog:
  - Update 410.patch to include new fixes from upstream,
    fixes bsc#1192688
  - Refresh bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
    to match upstream commit
  - Drop patches which changes have been merged in 410.patch:
    * zlib-compression-switching.patch
    * zlib-390x-z15-fix-hw-compression.patch
    * bsc1174551-fxi-imcomplete-raw-streams.patch


author: sbrabec@suse.com
changelog:
  - Fix heap-based buffer over-read or buffer overflow in inflate via
    large gzip header extra field (bsc#1202175, CVE-2022-37434,
    CVE-2022-37434-extra-header-1.patch,
    CVE-2022-37434-extra-header-2.patch).


