<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="246">
<package pkgid="d4e935e2cc35db92eb32abc095570215e10968c1e9a0dfd5994bc1053fc3d9734c6279d2c11d236b6c095f0e96a2169e90dcd714342c0da9042cd472e16b800f" name="lastlog2" arch="aarch64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="c40c9bc5e90d88dc56c4b8e0d6b3ceacb3fa2d8f38e95639037b9adc35f91140edb101fa160cec4a2764e29897e86b64edf7801a3f88b9ae5dca988cd0295766" name="lastlog2" arch="armv7hl">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="44ec27b2e04db0ceb7ca6868d63f18097440317c513f31b2fe8f4ec69974662191fda1a94c710b65ad0c25e1d9684abea30524bede2153fc389166cae94a4258" name="lastlog2" arch="ppc64le">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="aaa7d5dcedf4e064d175e4ea9156f578a82e119fe15ed5d1575e829e61426d7b01e5ddb66f7ee49b57feb9cd066a082261cb6abc9fb86653f13cc068f89c88ac" name="lastlog2" arch="riscv64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="81ebf103d2f35788f31f41cabe09d19f1332084757c3f65904f953f45a8038ee1e21b15dca64aa5f796188a24a6c57d6dfff7e975e3fc29156d952ccec8fddd1" name="lastlog2" arch="s390x">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="53fb6fafc65f30d042f7576a3098b1744985f08e0857984ecccdf65332d8e60618c35eeb53b210b6eba07340cac72c4bdf2881644d3aa61bc1599f035b878495" name="lastlog2" arch="x86_64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="57bfaba712abae6d8f99c1df6cce984e2405c2c4bc7c0f7c838feb7f6993cfe06dcc22d4415b68fbb91d897000d0efc532f50e7f17d67f30c86176c9f8eb7d1e" name="lastlog2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="5a0057a71cbbee19e7e0939f93a0b38be7ca6dc7613050c0d2798eac29c71ab07704801878945062bbca6de45f945a50fa188020390f8d6d2e23c087daafc579" name="lastlog2-debuginfo" arch="armv7hl">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="d910d6b3daed8f3e35d13d33d813fb87db2264ffb8b19df20e2fc3bd68d83746bba4f63f025cf5f3ba108693f674297bcb213c10517101c63eccd7d93e1e1863" name="lastlog2-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="4e9b6a8d2aa736cfbe6908cbec50c3797ee0ccc1e714a54341b77097998b0acb20fb8f16b5f05eb301a7a7aa9fc3c7c3976e5d26b2b4c1d0ab347deb4725ace1" name="lastlog2-debuginfo" arch="riscv64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="406a1937400a322f670dd72830fafcacbbe8b0448f436315a8eda4799b627a14679d313ccb3fc319596cb24425607791e06e6128ab575fd73039cff02e05996b" name="lastlog2-debuginfo" arch="s390x">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="f9237ecef52b34a900995267ec81552c05ba98917d38bbf71c9f28385fc5e9ce334726a756668391a11acd5673afe09b78a7f26eb6baeac7eccf561f479c7c8a" name="lastlog2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="3d506761977f2b92fc9475856704bca6a50e2e6c9c01d12532f0eeeec35084a63acecc879e90d00adc6db24d12d2e9f212c2e86f5e8a56834c196d21d9e2ddc0" name="libblkid-devel" arch="aarch64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="68e1a32b91efb2fbfe3c5d2e7301ef57a0bedcf54491e39f5c6c27af7165b4c17fa468bb894cce0482f78e9b4eb9b780be60f393ac878e0877ea6edd8629b506" name="libblkid-devel" arch="armv7hl">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="8d2b1d497741425d12d4f042a7740f37db08141dc9608e250e65cc50b5d3b398a63a17f10e898c103cf322856edecc6010b9aee9c5ffb69f99e32ec4555873fe" name="libblkid-devel" arch="ppc64le">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="b473538c5eb9f1dd811b343d618deadaca23659f40d9996a043f437b276cb84286fc0f264bdc8725361abc42fd6d8ddea14917036cc7b742ce6ac4e81445472b" name="libblkid-devel" arch="riscv64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="067722e7b0bf792b1462a07dde37d150b3afc589c8be5bcbcdf08eda48455cbffc62b830ee664f933ea0271132d9ecfbcf49bea5b4fc30f0039d9d169e11b0ad" name="libblkid-devel" arch="s390x">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="ad1b7fb9a3dee50f20710b1f9ffd5ac74915118b2945a6f254850772f846a0b722d8c1bd98e2ca2ae3f040cde2cb5cc114f871685403214d8dbd634d047ae739" name="libblkid-devel" arch="x86_64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="4a1b152fe46eee298a0ea3b206f4148bb879065998e959c01afd1c349ed09bb719150702a0cfdc22a500ae07adf778e3f82886aae6b34dc3d0477580960fdbd5" name="libblkid-devel-static" arch="aarch64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="10037b9a28320ae1bf1172ebd65bc7981e6ded0e5df0c716d22f63c93f6fadebaaf966535da07399b8cc4bc7b4e55ba49db7306738e75384c05d63701eba6683" name="libblkid-devel-static" arch="armv7hl">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="1cbece1e92f8c4a2cbdad06e9ab2a7f2ff64534c58761c7e5dcfc51271ed66253b6d4af870898b90c08cbbccdf76f88df17159dccff6191be43e59fe556f2550" name="libblkid-devel-static" arch="ppc64le">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="a15f6de965406526213ea6337ee02bf421d4c6883299cbc6cc7ca1272e1361b7a13f61663cc0a368184d1d62264a3a9f716d948022e7189a665ad2833299f3b5" name="libblkid-devel-static" arch="riscv64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="c23dd481d04ee13109bf0c3b41a754735258383eaf98fc4b9a3237c846efb1663100e75f4bcd3472aa93af7a803c0657ce9321b319474f68aa6bf2d615e7dcef" name="libblkid-devel-static" arch="s390x">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="bd4f2d26e1f2c74a206d41083bae8b40dc5344d6a61998e2cc160e59b4a2e680dbdfa9be2e34c4d973359ed5b2c14fec8ae8bb3c410115f0ad2227bbbb9c728d" name="libblkid-devel-static" arch="x86_64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="fcc534ff78729a88718f6000cfc3a22d8e427c9e6635657b5276e5a8096173110ebd4bee95bb357c7043a6e2e0b518c668ff0ff4e98a2dc357091ee5135a3c03" name="libblkid1" arch="aarch64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="5a87bbddafd779a40d7d1f1f70af29e26133f28c1107926c41478559f9e60f654df72917ae0e7ed845aeb336604bb1d3d7e28bb08d0037be5990d4d5511c1bc2" name="libblkid1" arch="armv7hl">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="61309b1cd4ea255e2369bdab0b5969d6971714d01718318b1c59cc5f4b1b310f6f7fc1015d8997661f6907f3aa898263c23cfbdcfe09b7b465e8ceae1d5ccb73" name="libblkid1" arch="ppc64le">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="884f67bedc6d944bae41abf032ee8b901a81751021f68ea1e82001f727a59e01fd1b70c5f119f1fcae7f84fe446ace899f98aed634a0d98f7f865d88a5a38d77" name="libblkid1" arch="riscv64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="1a4ea649f9d9977448130965cc273438d82afd94a5d8c4692d55f9c1c65b85c1cde41f377bf22723eb67c11f039d92357b9b972b4189448814303b825084fc2d" name="libblkid1" arch="s390x">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="2c5e339124e4b6c76039d9c9790240fc5c81e443cb27ba712ee989b6c69cc7250090dc17a4bf550a3c342c79ec7905f9020f277d1cf2b22f4459728eb5655f71" name="libblkid1" arch="x86_64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="53cf87711cdcc9a9d62952fde2eeff60fc737e37a3a730aa93bb32cf724a40185ebc6900c54099821e27f6a9189b5fe8276093c3227c7bb710f20787022c8620" name="libblkid1-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="b5c44c5cfdafbbed707e074d606b5624c20d87c3f129e45a8f71eff586cf602d433c6ce48db98999421436388d0905add2e1a9bc01d170389359985b7124a98b" name="libblkid1-debuginfo" arch="armv7hl">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="880079e8fe1a800590753f5a5bb5ff92b95c001fdd30feada9c936391cb474b7c59d49c2285e4d52ae708ee0530b8cfecdc34de8cb067cd653b3456ccb45931b" name="libblkid1-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="21779089dbff23469f25fc94f1723431057fefa988486dd328ffb2dff33958607a10c10b6570ceffcdad2a86f25f22d623bef15ddf3c98ae9d5833da4ae8e7f3" name="libblkid1-debuginfo" arch="riscv64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="86de33f529b6154ca35efc9edb6ac3fd8fe99b6dd1a0af390002e0b8815e2983a48abfa09a49dcfc16ae35262e23b0fe30c522275d905f080c22c547a72644a0" name="libblkid1-debuginfo" arch="s390x">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="4de91e60b4f1523dc88c93c873a2b9c62b200f4d8752caaa74da3d40643ac436aa0502bdfb18281789d67572deacf2bec212516065b8453ddf078ff46e8e9bc2" name="libblkid1-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="203c83e2a1ef1616b18c88630c01bb767bf6a45fc5e7a646faf39f994e8b291611332d644d7f005a667655e180844f36183ec4ea261382c39612f14c4ed3934e" name="libfdisk-devel" arch="aarch64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="99072e0975c8fef9180faf0cc144a10bb1bab4347bccf9b91289c09641b9c7b57ab052577cd05ab5c1cc7571c8bfce0650551b045c9e0d5d43de61bb667b203a" name="libfdisk-devel" arch="armv7hl">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="0f43b4449f243685fdff33541d5d4b38838a5729b998672cee6d3d7864c89f3d2b6b40e7b8f66e5c0347e4391abe8e170d42924657b67ed2a935f0f06207265d" name="libfdisk-devel" arch="ppc64le">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="7feae665cf0f5b6bb51efaf1faee378e6cb23c380b8eb1b30694c13f61ca7957f434582cba9862a7e5634d90d9502ae1b4ecbb6146e38c1532fdec55902767e7" name="libfdisk-devel" arch="riscv64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="5bb46d385b61d0de6f2d717d8bb30e9661e2c0dd87075d118e12c1c6ce9e624fb0695aa1e5ccc7d174cdc886d344174c760c29749098a1e9f703d9ea7dec0251" name="libfdisk-devel" arch="s390x">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="6b6c976b50cb60c74e520b67a1822904175b357779a47ebb640bfc97c35b974aa859f45a39d03c971f71c2486f9486ae4717db1dfa09e7f6066679541039c109" name="libfdisk-devel" arch="x86_64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="9e535879fc3f7520aece5d9b1b91ef246072136675e77efbe4710a9c6db5d9a0d48f745eff4081d50c5b07d90721d419ae5786d72490019871866a84018988c4" name="libfdisk-devel-static" arch="aarch64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="4589f375c4d7f37a78c701814fc1fa0b903c98beff83a9958db0c5d14350372da6d88a658b695081ea8f08138e58ff09edee68943ec34e57426c3fd15c175167" name="libfdisk-devel-static" arch="armv7hl">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="64f6219be40c07a78e36569a4506522aee3f33cb8c46941b8aeb80e958e8976ef90156a9f07eda81999e2603527b20038f2148af09cbd49562e55be0e05d2032" name="libfdisk-devel-static" arch="ppc64le">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="ae3876aa95041160a32d5f164e7d1e9a1b83e03eb5fb5be5d643968967fc9f4dc47d63fc013de9affee7be98894ac689e453654861f2bc8635c339666f538a52" name="libfdisk-devel-static" arch="riscv64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="7da6262c890b80d494ae4905516516b6692f1bff8b8bcc63fce6fd60adfd55e2acfbcd439bea4f6a173f77d9c1be9d0078102fc9a57bebde60968f0870c37287" name="libfdisk-devel-static" arch="s390x">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="df00d1c0c4f21538167066a27f5479deeb6f8a989f3d629c89d73af081b1615a4ba4c3335622c5b5e21afbad3703c82882c9cd029e2172461ad91b5f917fcde9" name="libfdisk-devel-static" arch="x86_64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="4e4f676131dcfe72541d37c1aaea838f0dbfddadadcdfd6e1b08df8265e6f57423a73485fb09e65e432850fe975489648ee22b00a2b9e22bd5a5ff95f8c89331" name="libfdisk1" arch="aarch64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="e7daeecd4eccea9f6403545401a1242b90fc12717afc76015b0724857134bdf18ee275fc5a8ca80d6018566500c34ed8844a54b1654fbadaa3e34185ebd77b59" name="libfdisk1" arch="armv7hl">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="f07ddabec287f65459b04b03d4d35565ca75fcd61392270ed358c7753ce859c95d1ae78b762e311c251a670559b60e70284e591f00e82e36df509e3605409324" name="libfdisk1" arch="ppc64le">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="ad8dea634a37d55cd8203d7806ab8db96d730a93d9d4e759093698c0bafe2ac88f244d92e835ac7fd36bed6729d6dfbb5b1f34fd470649a776b45ae7496aa746" name="libfdisk1" arch="riscv64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="da36f57d176fa8d9779587a33c6032d474d9a587293e2547a28768323796c93b516db7d2daf6c2b46d6a1d7dd951ea9e53dd8dbed985b20e6dc759c8dd11cbe6" name="libfdisk1" arch="s390x">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="aa28d0f64a47aee43331a54bca6a62c9044a9cf09064c7ae2c138a4532e51a25d0ceb2382f45422945674aab26466846b713634dc8f49826430f0e134d909486" name="libfdisk1" arch="x86_64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="2e41ed0f971d72ab86ce3985c89ba822f48f5c83a693378182a6b7d347f61658a6732688dfed2c14f13dc47afc0ac3e3e4adb88d315c3f870e423c804566b587" name="libfdisk1-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="6cc29b3cc67269b3362f6ed82f0323e05f903f979f5a196e25d49cde9f1b5f7bdaca05e6acbc237839c8a94401fcffce988623f20f67e9ffc61a8a215aa3a59d" name="libfdisk1-debuginfo" arch="armv7hl">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="94ca54fe7f0c6b944a2947751254a9277293d2e9936abff343111c5df0e06ac1d798b17ae54034145353acfab4690b3f26a1b752dcce0469eba5ff7ca431781c" name="libfdisk1-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="796491d6cf898b74a41ce424e89a46df1869a2356dc930765bb11908a28a473e325eb4556d4b8049d1b020603948781cb56cf5a5b14924dda296bbed1a7d277f" name="libfdisk1-debuginfo" arch="riscv64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="9dd6425d2a9fd5fff81376a463474486aed153f15ecad533f8c92aa39fde059cbee2a4c6eb0f36e1f525d6646e6b7833b2d4d2789432515b0a90e7b245e3e29e" name="libfdisk1-debuginfo" arch="s390x">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="65455950a172949d82ac6d80e3b5bdcdedd94da0cb8ba1070df39a86d87e519377d6599bf19047a5cd46c0082b7f65044ef56edc34c40eacf05c9d7e34b4e23e" name="libfdisk1-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="f90cf454057756eef5dc34202032dd6171934b4fb872b93242993cfebb8860a77d71500f8620f726545ed54c21eb7841799701a781e46de339f63833c7c6ad75" name="liblastlog2-2" arch="aarch64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="62d432930cf1c680c4486a9f242117391eaf0d206087b5101e5c7d4908e953939ca5974780aaadada893203d7e764cf0f2c687a58091a91ac5c276fe706c1c4d" name="liblastlog2-2" arch="armv7hl">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="f7fcf53e12942fdac680fc98941a6ae1cb317bff14d4109ebe044abd96f03d8d103fffef7b1d748c84aa6ed15071ffc5390d4b0cb09520b3e77332a18a656968" name="liblastlog2-2" arch="ppc64le">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="8f46495c9eb4ebc895007314fc2d10c9cd18c1212d09a0feebf22303bdb132bebfcd5207794a307f675d25134c7daf0e33321a80ba38b9dd29c766f6df6f8eb6" name="liblastlog2-2" arch="riscv64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="7944cf1b7eddd1af305affbc54e247b41e10f61ae4a891783cdaf6dd069f5677c1751259c749910f41f3ae8b89c8c23b6275961a770e667df1009b77ab272c35" name="liblastlog2-2" arch="s390x">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="795b5c6034476eae312431d8321a9616bf59526eb42f69bab22b2336cbe508938898908d882d396af5add08b96703aaca232f2901917ef75e29962da5936eb40" name="liblastlog2-2" arch="x86_64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="57b9becb361b7d0f5ffe856129eb979912ce62bd07ae13bccb237d230f321e74369f0d39d6e28a25c55e0d36f59de296eac328ee49178ad8b4bfaf17408b7809" name="liblastlog2-2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="7e64dff0b3db735485e18d99ce0115fc63d71c1a55345d45dc689d8c92d7d05e4317e181a5ee1c678208304141057266661affd871452e7132f1a6f8bf9f88d4" name="liblastlog2-2-debuginfo" arch="armv7hl">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="c971e1e620ab8e2e7fa878bd1a32c776078f162c055ad02b1d032f88e0e65310636dfe2ff0ab05f1ee1e516bfa4afe3f6c1dbee34dd8964b1e563333fcc9ba47" name="liblastlog2-2-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="f1533fa4da7d3a16f41e498da405a0f65ecafe0b95cc8bc5654ef4cb9be20f3d6deda8ec0818b974358097e447669dac5ceaff03a894e0bc43c10e4c9915883b" name="liblastlog2-2-debuginfo" arch="riscv64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="cd3335925d72598a0545ab33599a71952bbbfab15037f53cf8aad19743b46a1a5eee9d468f7d35f3ce4882fb088216b4612157f72e88644c73e40e0c2233507b" name="liblastlog2-2-debuginfo" arch="s390x">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="ff1fb93eeb7aaee5dfc0c1113164a1d4d050ce63772f77191ec920b884aa2ea6357d7948abc5b581e573fa81a25bb64efb6e49391499831f82aafd0b2c59cc1f" name="liblastlog2-2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="159da8da962c3ca52601aa9f301ac3d5fb1c0eeeaccfe81296eb2881acc47392c9dbd7a1793376e71e0373637d54ed446f7ac04bb97974621900162883a40705" name="liblastlog2-devel" arch="aarch64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="dbae0a36713a02413620851766caa92dc2c0c1e387fbf71b9569839374ed804232568492f3b587f0cb95621d2735496fd99a48a03e6c67d5be43cd282f835a06" name="liblastlog2-devel" arch="armv7hl">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="497a083f992cc61acca006762cd13f66d67c7f235268e322ec4882fb358c544c1e2fd9cbae5d807d8885c00044a8e5337531e28f273529657ddf5fa5a9d3caa4" name="liblastlog2-devel" arch="ppc64le">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="ab0bbb3eec56ba189e668975e562f917bc4e3d31f1147d3a24f5e6e8e013789be545ddfdc6a7d7f6fcf678e15e62774cfb37b4e0f44462a5ed25e0e710b36282" name="liblastlog2-devel" arch="riscv64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="16311715625b8a333acdc4737b629e1c0965ed32826238660f652b724f4613bdbabfccaac9b5cfb2f73561d7b830b53e07f4b1e79cba082b1b37e8e2d081147c" name="liblastlog2-devel" arch="s390x">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="f0531c1703ad70c25c1c438ad42f9aa0526d28be53eb1a8e4618081cb89b4fd090ee0d9b5c89d89e0178fe28c72cbfa14a0d4f0a76ac8051571ab971cf9e5c69" name="liblastlog2-devel" arch="x86_64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="d7c11b80f780549d626ebf196b4d931ab787011e10202cb24bbbf4143cc53c0f68c8a7198debfa3b3629410b82a1d4e34e65d7f7d8d64bb515d08d3e54032344" name="libmount-devel" arch="aarch64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="1313962ddf296d7f88b62c6548a3d7f7cdf7407a6117043f95ea8a56c832336339aabca924a6a80b692a8f0ad92c8ed12c74a4c7a13df374f111837c270b251a" name="libmount-devel" arch="armv7hl">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="b90b01d239a71a32a11981a97ca3262fd85fd33d9ed2441a4803d4cb40a4177af18844420c7848bc38112403307eec29e51987712ea259c01439426f4104b095" name="libmount-devel" arch="ppc64le">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="162b4f9bd91d95fbd19dfd0dee25f1ee894f46e52c9506ea9043c95bd30ba737a112044cab1bd06ac07d4edb718e219d76bc99457b99ead1dbe0f9f57066db58" name="libmount-devel" arch="riscv64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="eebdf74568a330118b7bb3c120c76586edb5cfb97ef25544bec2e386cd10bb0a29fd5ffdc630e7bd4be0a0c4f59d61cc6413ede7bef377cb0e110a3810535452" name="libmount-devel" arch="s390x">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="1420157f2710dd8107a6b728e3ee4bbf9f3595f6a1e1b840fe4ec8b4a7a583fe7a195500af0dc80ddf621ee155a9a6e186dac22f4677fadb993d84d5546ec928" name="libmount-devel" arch="x86_64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="78f0f96a7cd38d34e1d4a0a2efdb9c8452ff23040d6098d9be3e533d700e9c931ba636ffa0e46f5afbab90a48fba99b3946146f64672313494fc9eb7d988f247" name="libmount-devel-static" arch="aarch64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="2a06b717f89b09845379a6b0ba38ff607359c8395028b569cf634d7bdfbf66bd40eda5046c3f7fdf077111a21c6d9ea233694096eb0641315f88d448dffa3d15" name="libmount-devel-static" arch="armv7hl">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="22a6aa1a48b8868ba69c005baf29ede35e10a581be29ce8ba0193badf56b532cb48c0c971cfa3fca973ae37d4bf3eb30911641c9b5620d983ac1663211b61f55" name="libmount-devel-static" arch="ppc64le">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="c11ae32e1427a30e6dcab8116177eb7d4a8f604fe23ca0a4d87d0f5738552e3aff2b5d75f3877b5ee02876e0f80f76d6347323f4d52ac8c7d5253a3aa2b2727e" name="libmount-devel-static" arch="riscv64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="b8e0ace061d3127f4ae7a480a03d3b5d492b7bbc7e7621e73036fbb85d85fe57b72a5305bb5f3ef434280dca4c62790d78c4d1533a8c50f56cfa5daa4c900232" name="libmount-devel-static" arch="s390x">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="1cef86feac60540e50dc86a4378de88ebc2b9008e1a93b321a531ffc053da78565d4a232eaaecf95f8cb799e6dd6e82a88bc8418fdd36ef057f213dad76f871f" name="libmount-devel-static" arch="x86_64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="53425c9d01fa40409fa76cfddeee2659ba0d714b5e5603fa5160f8f43817b2f71d5c09344450a70a1f400a6222cd7fbe1b498a1fc0a66923ffb2fea011c8dcc9" name="libmount1" arch="aarch64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="47c8447da204e323463c9a95324e7ba77474ed576b93aa5ae39b6572eef6bdeaf330671aa7549d49814044e5ebb6a980061152a7e00a3aba469d9a4c8ec6ba96" name="libmount1" arch="armv7hl">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="e8ad8a44af71cff07d6f68762cbe5b07180f6864d3b089aee09abb77f18781a6d7f651b4ebd9f80fc8ef544e507e1f85229a8e7bc010b1e52cf9583e850d7b95" name="libmount1" arch="ppc64le">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="2931b720591f75eb30c2a7b8a8e97170b10f1709ca9d87a391a421ecfd7b62296c1633508ea13ddc229882d644cece84f40ba9643b5f779cca354f4d2c0d3fd5" name="libmount1" arch="riscv64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="18147eb7553c0852d091abe0db7942e841188131f70c74ec05de80e9222fb89f86e0832d36b94855ae0d3ff97ce7db05aa13775c52398c88590cfad161038320" name="libmount1" arch="s390x">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="3d7088377ddaddc8d082f42624cea4fc502e7a6f4272f36e2aee6e2b7dccb3e16bf8f803bfc4845744cf549464ede79c7f83a01f87d60c41057a5af5545e3272" name="libmount1" arch="x86_64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="f99d2b52a8edbcc1905b0c32a0407d0cc4421f1c8082e16ed7505e97a92620a718b573598bd9297594f2c71e0584c723b8610f931ce4364c6b2b00f9a4884ee8" name="libmount1-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="1d7dc7289bf61c204d52b72dc98042be99ac9bdb798c7f7b55fb1104f3cc954d6d651684899c7152d3d700fa6b4412086cb624bda307c2375c55a014e1884e75" name="libmount1-debuginfo" arch="armv7hl">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="dc52a4e9048f31598c666fa7e2b96a11fbf129e0d27b489d590570a5cf6da6c7ba702f0f1ca215f9c44df72d3d9dc0f80868121a8c05bd20f377b03f09d9e115" name="libmount1-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="cec46eca352a2895106eb8e0c1829f38418e1e298696a54ab7b65379c0d94f0a8a79a3e12c0d07f12c8939f8ed444d92dcef0c07f925ae14e61d1568df3b24cc" name="libmount1-debuginfo" arch="riscv64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="0658535fb2d7f522b9638a485f76e3b4d85720cf1366169bc0d259895cdda06eb8dfc88cd7a427ee0f893c2cc7309eb7cfe30f3e6ada11d25ebb24835c69c316" name="libmount1-debuginfo" arch="s390x">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="15a73d0bb34f7b899f7beb76a8f2b0a0f4267e79059ba371e3cdd56b1169235ca9249135a97646a3368eff422c9d80e10965b891aeeb3329a21eb9570f107e31" name="libmount1-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="26c161a14b59746aab1d138776a227ca0e292c6821e55c9a750e1a68ce69be37d0bfb04f4b66ac8d644b5de8f33ffd7258e83f7851eb8244235f7fb2fb8a784c" name="libsmartcols-devel" arch="aarch64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="44f22da01763c9fafe697e75dc5021affc7b02add982c2914a1d432957a2275ff6775a745aa65c573eaf3fcd584db9a20aafb935f47edb71899880694ac25079" name="libsmartcols-devel" arch="armv7hl">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="6ba9f7d5d8c28eea63d827aa9a8668380646b0bb97921b567e42d2788d61ea466b49f8d158fc035b904328b406ce0bae033256e4b392388b721d90113e0394c3" name="libsmartcols-devel" arch="ppc64le">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="fd589e3b9dd960d5add243be446e31fd7d53a17f249b7c067999153f7ab81ee4a6a6a18053f4edbb33ecd9f338adfc1b1c3f751ec351440bdf43444ffe8ce88f" name="libsmartcols-devel" arch="riscv64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="6ade31b1ca0c6ea7144869a3227aaeb58675fe51049f79853b35af4b23a0700d197b298443a384e393d98950e30fb6459f802a5cdead671d2aafa63c263b15fb" name="libsmartcols-devel" arch="s390x">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="af04938f0aee438561a8dc350753c328bf437cd63f5899228b30bcfe1825611e03994da7bd2e82f13bdf96fb74398323bea67d7c507423c922e34b1ac7a9474a" name="libsmartcols-devel" arch="x86_64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="4feceddef508d630d7cfdd45b123fdbd9eded663b32a39e1af6bafb3d93a8600c3b5bf50d2427797a663e9fbbb1fe0d5e83d631dfc78473008b830a2b4ad622f" name="libsmartcols-devel-static" arch="aarch64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="6d25747dbfbb1a3414cee4833818c6d88fb0a8f3c94876ffc0e6f30d1bf1e8651b8bdce511ebe90ca74317a80a42f147e796e629fbe662fa803defb7b1e1b5eb" name="libsmartcols-devel-static" arch="armv7hl">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="982e15bc611f720b76589439f05e889d87cd36cff30d3ae8895a1f3c886f2baccdb714be508e32f418566d021b7871b767cea5acb011b2a6ebfa91e83d49e9c5" name="libsmartcols-devel-static" arch="ppc64le">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="5d2badcf9238122ea6010428ed55e34ae005bc43dfc3719c966b6691db905398c6fde04849a300d2d0d87cea44648b3850581dbc49d2f476aad40f5571191c47" name="libsmartcols-devel-static" arch="riscv64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="c9076fb321f5dd1da78a950c07b1589507ef4fb768fa382e67bc32c03dba701e65cc28b38576c239eeb38a2eab29499a3b85ffef50be8ea8cfa52bc2bbc68eed" name="libsmartcols-devel-static" arch="s390x">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="a28ccf89ab05eb57868d01d79538c9a3616bdae583522651e5a9500d0ffeeff518ad868af660666dc96942cec760d51e7bf856a783c4e2767eebedc18e913a1f" name="libsmartcols-devel-static" arch="x86_64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="4569508f6ccb0281aa1dffdc1df579ac857e451a68e4b6ffee0cf4bb6eb834e151a83f844fb32431d8c42c2c80593dfe603fe6cc94e8b6e93bead9d847722a41" name="libsmartcols1" arch="aarch64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="596ed33ecf090983f5aaca73e1dd75e28d3b6d947e3165d041d94887f3785b56b6453eb93a9008e27eac7dc562fd29668a21b1f350844e5a2c673605000d6dc5" name="libsmartcols1" arch="armv7hl">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="db21a86d354fea0a084b5d2ef788495f6f7b5856737ad7ebdd730a33b0c15246c08ee0b47b92751d927f3c55a3d65a0f4d4d45924c957a4a6ba006857017998d" name="libsmartcols1" arch="ppc64le">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="e00a8c7d6281294e3bfca30d39058502bdd9f12733fba0fac8ccb86121b308b99b68926ed2c48a3f23de46b4646275da19f21853d59feb5c30dbe95f4a13252d" name="libsmartcols1" arch="riscv64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="ce220c0e1c1ddc6626ee16111788d42e679307f1eae215daba4e692599411e99c83aa4729f9a4f1093b9a1e32d31059c9f6358bc19da05127ba9a9bfbe883cf9" name="libsmartcols1" arch="s390x">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="7483a7339ba9d44e8a20fd07024a5ac6eac601c1335363599fe6774a7879a475af63bdff4e7d5c857a4dba23d1259aee0d3422ba1e34b0c8acaa990018b771a1" name="libsmartcols1" arch="x86_64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="0d6cde1f135ef0f2f61d50cfe98eaefbb94ad3752fc99c174a7df2a2c28b9b11dd7ff88303c7bc0a65b391d776fc2d7fb3e7f438fa655912102fb84d04aa399a" name="libsmartcols1-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="19f0ebabbe377647f9395da450a885950b9c7aebc40071112bfce62daf340d74bd68c8dbca22f0fc90a09a775af07a3b717f7fcb790140cd81ab54dc0271aadb" name="libsmartcols1-debuginfo" arch="armv7hl">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="09f0608ad2ed42292bed4fa3130c2c6759c3f2dad8c58cda57ef07c320897c13263f1e2010fe06fb88b3c3e6b785890149b3faedbcd4524aefe7b98d7cbf5ce3" name="libsmartcols1-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="48dc9dc1fa1fcc944ea89a14f02dd87415b832cf04f92a52a8d9f2331d7d24486b1813c16977593d3151377c4704b09bb358df30f611a3827f86c09a61f1edf8" name="libsmartcols1-debuginfo" arch="riscv64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="38bdfc94f04fad4e028507df03ed119b1bb590e09a29cb42dfabd8825d979ee4f7c9c832d579335a4b8b2051b4030a99eb65d9265f2fb3d5bd7fdb1c7d58da7d" name="libsmartcols1-debuginfo" arch="s390x">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="27a8f4495ff93f28285a14ac6d11ff3bd4e4bb8b7ef5adafacbbb1cfa611914969c7e38980ec4b11a753f11a7e837a6fe278fc6a5bc8a4c5511b1a05bbba24bd" name="libsmartcols1-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="63407badd66ed00e1b6d5f77c3cfd71720a8c5afd74c535be5c6cf7cbd1851d182a628f9fd2d5145cea799ab8438a7e95ef7e12c7e89162e59b18baa9e7ab50e" name="libuuid-devel" arch="aarch64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="1fb6ab80f599592c22154b3cc935e7536fc1d0e2c5967347541d29dba9421e7c4582f75822e4433de1821a8e4fe5c3d40e0bc91d3acef75be054ac9d201e85a2" name="libuuid-devel" arch="armv7hl">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="e19c163f3c5a971f2554a1683f23be9e6f0d41f5aa699943e039550710813a2c912010ed71880dc6ca8e8c8236bcc24993a9975bd84308bda67c4f8e8ab2e5c6" name="libuuid-devel" arch="ppc64le">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="6a82a37d89819431f907e6e108383bad91a04b95c0c7811971db56671d27f54696472a16a649f345b8a08532dbaadb7139da0b54afb49dac2a24e6d02b65c690" name="libuuid-devel" arch="riscv64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="0acf023b2a2cf9ad2d24846b80efe6e1323a0084647ef0e4505291b31f6e35806d1692ec0c76add450d4461dbb0c5c2e428b29f19ff18ff0f4750592bb09ba1a" name="libuuid-devel" arch="s390x">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="2bfe00d21243ffc04addbe6a8509ca3ed4f07ab6a3cd32e385eeadfbef6e54ce72cd69563ddb607aa37bdfeac8418d4d9f2f844bec7b3b63754c076fdc34f6b4" name="libuuid-devel" arch="x86_64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="def7289c1fd82b03b197f5556b66a607d2f81500555fdb3d96630c65ebeddcc3b6bf1b26bffdf8a4930677077e872994e822668c4c19b7027cf5e715633c6312" name="libuuid-devel-static" arch="aarch64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="ec4cd4938d5e3cce16dcdd9e54412bdf168c45129c94219259dee3bf3463591c9d1ee7d6482d28b615ca6be9ecf1dc6319704cb719847cfcc7be15d5c0041c26" name="libuuid-devel-static" arch="armv7hl">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="9bed6e6b645736fb46c003e197ec77925f20c1e5f87d9ecc5299cfdafcd7deb6d96e8cc507fbe7a8888bbcf9de65169a13d8a6410e7320f3a27e1bdc13d5688d" name="libuuid-devel-static" arch="ppc64le">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="50a1c5224bb10d58b7b5871f6eb089ab729e7b42df552f929ea0f289765d89f755a9979a4e19e939955add71a69b4a2bdb04efbbf5162757f946d91054062ccb" name="libuuid-devel-static" arch="riscv64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="5fcee134f32c5a403a4010a844036712be93449a7baed78e07c9b68e802753bf55b32f2fa60cace70f07a3a94f904144c62bb983f8a05e07179d36c2302d8780" name="libuuid-devel-static" arch="s390x">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="b64a5c3bb73902be37a76510aadf1927409b10a784bd6d274245203535851472af0834467e880411626baf029179c4e2dcc1afb66da6dd8f34b2678d5eaf3636" name="libuuid-devel-static" arch="x86_64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="903154f50747dabba23dd26e5c8fd673152f2fe38854a5f345e5f857f3198ffc98504fbe4bb6890642dbe44843f02e2f0615b83f1bc67709754ecbd661e1427b" name="libuuid1" arch="aarch64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="b2f4c472cf7b6f8d986c8eeb621ddf6bd9d68fbc904d8b3ca987b7e9cba38b2ae13aa5ba819dcfa641ab5ca25bc842d38f7cd8c0622ea750ec6546cfb204af12" name="libuuid1" arch="armv7hl">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="7c6dc5cf958f9f42825099cd16a0fb008e07438d7e5ab8221e00b572cd295fdb8c3f14a40bd00c5a41a26e451ab3ebbb9ba8e25a7c18e02cf82813b099c282cb" name="libuuid1" arch="ppc64le">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="fb9552a865a0da06b7295d6478c3759cd074601394d32c5909ff0cf043b07b897b3042cf852da648f7cdf86ece105bc6b2c19d9502377a618b98c45821de62f4" name="libuuid1" arch="riscv64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="d09c0351a31ce484b6c8dc10bf6eed27925d7b3189adf5bba988012b2277b5a15b1de0c29a26a53a9296a0b4bb2e83c4542d923e682dd3f9fd64df16cd647c5a" name="libuuid1" arch="s390x">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="09985842b122db38ad2f14d9042cc06722600113b652346df8723fe6edaf866cabf025f43204faf44a3e39e3f3d75b2c4a6e76d44ffaaea2185661636a60ea15" name="libuuid1" arch="x86_64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="0cd7cd8bf77676423cb1fb0513ab585c10d184e05899c1b26450e952c82a93119cf3493b97752dc4c0ffbf50d6486f7d5ab90d745f9317c0e8a4907f21f21bed" name="libuuid1-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="7f19546ac0acce970e76cb623fd44da486f55ba4010bdb1eb966805552199cb7529f82e48738d4e68278a84fd6d3da5611836154ea73b85aa6dd729e5b9371d7" name="libuuid1-debuginfo" arch="armv7hl">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="d3920afaeb50813299630b7bf13933602169dfab253340e5ce0cadd8679df6bb4c4e99c6788441ab0e234174103ef7c7713334f20c905342c9eab33654ad8cf4" name="libuuid1-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="aada71b6c8b90a462773144e7f67c716a6aa1833b6009bcd84da3de1f940d493053781d598cba7d86d3717782896332e61c6b2dd9c3c80ecdd300b1f44b3b009" name="libuuid1-debuginfo" arch="riscv64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="5d43db5cf36756e1c30d64775b5c3b5ef68e384d0b51ffeb54eb23728ae3332c734825d8c4a84a18212083b072cfdc84b1ad1164d894a6bbbaea7ec99fd50db4" name="libuuid1-debuginfo" arch="s390x">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="08adb6d8b51979ed4ecdcfb06cef06afc421465e9f8f46c9a9cb050e0e004087fa9886309019d8be6fd9e6810adecd7cdf9a13e9171d8f25866020c93121e2d8" name="libuuid1-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="e197adae4a9e0ae8fd7448e2dacd0d74d41d13b0bea87d541367b1781c357edbc5e5aa79dd450843d1791b9d45154e0a4e3c92130d3e204ede1be8276d3ab347" name="python-libmount" arch="src">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="31859189c02d4f329f63f685f52eb9f8983663daf1950e174eddb4c37c60028463028e72d0ea352dbfd771b530488c9b6d53c6a3fe7d1636ee01c3230f3aafa2" name="python-libmount-debugsource" arch="aarch64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="3365b01f9855e335f6074832c9e5c0f1e55bf10ddfab32d5939d7eb8288b1319f36ff7005e1454cea0b2fcab4cfebb9b31365301d5d6ee67aa4de41a86399087" name="python-libmount-debugsource" arch="armv7hl">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="a5038ed2b56189a0280752f5c6e05ae35d59eb9cdf7f8f379872f2ac3d495ef1910222b37b1ddd34bdf6aded7907a01d000e8151299ec00c8ff68f8e2c651d20" name="python-libmount-debugsource" arch="ppc64le">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="f9a69e57304c1986e58cbefe1e3a1e5d46f378e0a812a28c9123641476efb42c0f52d8e78f8600721dec1314e718bf9dd0abdd4aa6870a55668ad4a08af4135b" name="python-libmount-debugsource" arch="riscv64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="7292714e0cb8380efc041058b642c001bc84639e05bd4a0356d7cd516ea20146027d043586ae7a05ab018906bd872857d30b7d3ca75e0645dcdff6725409d050" name="python-libmount-debugsource" arch="s390x">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="a451695b9cca91435198d3ced4df0822112f28e255827e6828baf405680410fd2ab1b473c45a7179ca787fd132fdf5ee202db91cab349d074b5b845efd2ddea8" name="python-libmount-debugsource" arch="x86_64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="0611d68cb116797a5a66c37fc0107506dade285de00324897c1e926b82ae8ea9bbc973f2a6622de88c3fc61e4f3168d8db1d22a0479f6eb675e057bb3b9da7f7" name="python313-libmount" arch="aarch64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="eac1b1b06e44a388abe55dd071be9feca49d678735382ec2f87391ab05d12e134a8a6971dd4bd115a07ac1c4fccee8e808c947effaa19fc74aa0a0c41970d612" name="python313-libmount" arch="armv7hl">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="f141af4a08841b100a9b3861ffe8981507a14f2ac861fcc04e11805cb23e0fdaaa1a7639174aac9fc604b751987887a3e24cb9bf017ccbb796c09a02375cf6e9" name="python313-libmount" arch="ppc64le">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="c08246a217c6fafbe2a15e16bfa56cbdd508b2486cb4a35e54aa08822695da14f65451b59b8f3a2a481905931554e25d544fb92e13c0bb66a8703cd9d803d0c8" name="python313-libmount" arch="riscv64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="5e1a7fb48d994330789840493504e108b165060a951f9fd6a73ac2169c994cea69fef0cca90c24115ebb4a655d17c071f5ca80b14eb94e0b532ef23d0004bc54" name="python313-libmount" arch="s390x">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="47ca1487920f3dc06383e285c85971e6825569c1f9576e4c1cb471265d4fbd28561cb076656b6d88bdcb0422a2467021644d65c27708ba61d8e03f6d0ec39cd0" name="python313-libmount" arch="x86_64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="96d5b4032e9c4b5ef1cd3d79286a56fce3f236c0cd2d164d8174d3400367cdab25bba68ed6e2d8318caa279d2bb7dbcaef3162753bb478358f2f29c53d9403d1" name="python313-libmount-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="0608d5ae02e5b0cb495af0c3988c26c4919f2c7e03882a4afb8c56c4230192daa3edd754f91c99f94d7fc425c61e4a46d1e9c536dbdede3961447c2c14b8ca9a" name="python313-libmount-debuginfo" arch="armv7hl">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="20bfb3dfc2b34f08bce311068941f920111d7ce5e225d0984e4a93ae0c14da446ac7cd1625c9c52f7be463abc4710a502a1511ff4ee4d8d8d7d6a82fe0794741" name="python313-libmount-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="332297ce11b563fd8e335f3bce93a17234d42722dcb6ca094ffea247afb912eb201872419a51fe1ce606a249ecbe6df9cacf504ddbacccf10f2fda80a9975a11" name="python313-libmount-debuginfo" arch="riscv64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="b62e0e817604f4d03f037030a3bd1d1678c81b1d28511e10f291446ddbac69a3db00effb84d9e3180bb39c28e2e462f2eeb946d03bec1277107a7c021a9de159" name="python313-libmount-debuginfo" arch="s390x">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="56127641f3cde6d7d32a6de1102fd789ecf5a38c7469ff226ba5eb25074a2f9f7ccaaebc1140147e19bc198d0c972882f0ebadbd15ebfc7bc9e65e90267ebc51" name="python313-libmount-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="65ae87544478fae5a299682b71835f9012eff7317a2cfe4d4eed6e307df3ecc07ecc946d05a67e7fc3a57b6d5228f19416b0b79beb50fd91390866784b51ce85" name="python314-libmount" arch="aarch64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="bbf0e3c6f1abe77b6fbb66e2b77ac99ef66b989571839cfdf3978373c83fe21879093ca99e30339e84decb2bb70f0f86ac21a2b7a57923335fa4c2ff68dcc9fd" name="python314-libmount" arch="armv7hl">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="b0bf6186fe66b4d78a23f07717796d23af0b770193586fe8634e838d228ddde8cfd8e4ecd2e996f0c0c7024bf25ee51fddf536d577ce6fcd98c57a7466e05b1a" name="python314-libmount" arch="ppc64le">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="c4b6b212353483e18e77929a8157cc2ba5b53918964a7fb727d91af62b8c4015e6b8783c0951818e696aa2a20461c1cf73ae3790aab2072c70b241b4f1b85ffe" name="python314-libmount" arch="riscv64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="4778a2823fef51881e79fd3e07d0cc3150913353858f7e1c6d66ae3685c70e0965a8924cdc80d1242e8ba14b71a56a7f1b1ecd732520ba5f5602e0d2bdaa7f56" name="python314-libmount" arch="s390x">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="13e2b4e599268d673209d21e7e83a50c6fb490d3a0ecde78fff38613b78788d0339f2f2b2c5feb07928f7ef839f4323c9c58f02339df077bfdaecec7ea1202a5" name="python314-libmount" arch="x86_64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="4fa1da3fb79866de31d587e476e3cb34c375006c26695cb00ea8fc5e45417947780e7b1194dc1aa8253bb9d4f48cc8e1e0183ac0f672267eb90e8b5275a4dc75" name="python314-libmount-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="e041b71fcc006cb4ed73efba3c77aa53308d924c84802091d8914233d23a5217e3af8f5b3d3a7641886c7de5f5847abb180e908f4ac5462d870d9faa8947b149" name="python314-libmount-debuginfo" arch="armv7hl">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="b9ccc770fb1cea0c41537c21734d02eedbf0f3baf5b46bd60bebfdf478df3721f5ff8b0fff22c776d34f4c66f8ec92d1a6b768e3362c18ff261c72ff7aa0198c" name="python314-libmount-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="6c5536507af00e5f41c84c0b722ad3e1f778893b20fb2791470fff53ef3fa4ff29a5b056282904c7a318ff53d304f7f8558bf91d6ea2009c0f247d005ca36338" name="python314-libmount-debuginfo" arch="riscv64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="d026583aeac35c6bd373d065c3f992661a96230d0ff3400309c876bb9e3db48fc57570bfd37287cb44c5fc41ed5b36063dfa3cb81a17124bf5c66b9609738081" name="python314-libmount-debuginfo" arch="s390x">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="4f36f73479a62f97e525ad90ef0c1b823dce8ce401b0619d8afc06ce1aa84c56069efc25099600b991ee5be925460430f1918984998064dad80154a87833b92a" name="python314-libmount-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="caf059ca52510c832abe1a6a941e5e8bb9e5ac556095af6a3783f32c43df231ba8e0c152f1ba62e0869b8f81bd69692ecd590066f98289e627ea1cab8b552524" name="util-linux" arch="aarch64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="8f5d5c2fde5c67a196f3fc0cdbcbf708417d28c63cb16c5d238db4ab36c38fa4e4fc63ad024c03723aebad93229934c5d6850410e6d362a2e57555f1f0eca973" name="util-linux" arch="armv7hl">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="af0820976f3a584cda886b4f70ffe9e1037035eb6078c101a59daf1819ae31afc3f067a387966b5dfb74a93e9fadd6b8073870c81c7da1b49d5a846e3d786b14" name="util-linux" arch="ppc64le">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="d0131731f423d1cd1a62ca7db9d41cd4324f17b716c111f6dd48780b1fe9097b13f97b3f0aa834abc6c548c450663c7869f31ba1495270bd040062f81d96e9d3" name="util-linux" arch="riscv64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="b0475b69bfd6d23dbd2dda09bcc4ee6974f61faca36162237a5456b7989652f479819bb4d20745806016167e42cd05929b07a3a310209fef9d6363ffe14aa641" name="util-linux" arch="s390x">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="57cb4b29568eaf0ec6109a9f78bcc485e75607587bfea066c04f5508133fcede826f1fe08de490f3b6020d204b7c34915d82b955d440b7c1af98425d9687d70d" name="util-linux" arch="src">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="c6b90d8a3d3d37a5066274dc3dc403874485727283487091f4c41e4046c97d6da760938948fab5a6a06d64bb57170982243d8901ac9065c050b8f4f670df77e5" name="util-linux" arch="x86_64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="cda0fec0be58e7e889b612a9657ed3690d94931bd0f75c3f011412cc0c054c65f2b71ca14fcbb88f84133a08bcc7918f217613934d0bea0896714a0c7ea6daf7" name="util-linux-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="f2c0f36f2b6c735fd297dcfe8960e420de2d06281ebecc5dba3b26bf60b5a05499671bfd51e6786640d04aaabd2fcc0b6d1ffbafc1fa00c220d2a78be2231da2" name="util-linux-debuginfo" arch="armv7hl">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="8a7fcf0bb062b162a53b7c173d04668bc2b9ab04de38164aca38a6e40dacfab1f638780b566670eacac86227f0d5dfd10901615dcb205b95b7770ae5755b056e" name="util-linux-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="91929ea3fd53fa415093a6e167b2ab5ada34171beced8e6b9056f83db569301918ccdf3cdb0d4ce39b417af602d076d2f4f09c395a9eb2c4bb657e598f69e0b8" name="util-linux-debuginfo" arch="riscv64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="5ab7fb5ef04886a9a7d9c6f2d8855097e5b57b898d9d98c9bfc0aace1a1eeb85f577364e9434e70cde5980b785536df444e8d542a22621595543dfd011056ca8" name="util-linux-debuginfo" arch="s390x">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="4331982ebfc442ba3892c7e84ac09bb8f1774c3d38fea5e61d38e2b4da7b82c33e772cc366561236347fd7ac6cad0eb6989198db3a100e36a0e76d269d2dcce6" name="util-linux-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="5e2d8d03c316fbc712089ac5abe2421b3182f4e3530c2468aabef8ac9f2fd8e28204941dccd5eb21a65c0763ac059c36f17309ab952d137184f7797d8fa016f3" name="util-linux-debugsource" arch="aarch64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="a30661074c90f435974a7c746e03b28810bdad35940599ac51b86a2b4a132bbad880cb6c3804c2c0154afdc5f1b6dd063c36e2e132a963cb61ee82e91724367c" name="util-linux-debugsource" arch="armv7hl">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="3b62eec38226be5cf3713f919d937893b754856527da6c1912aff6ea46ad87b739181eb24ab7bdd1ac87b086eb443bbe7023890fea68fe20c236fb781864be86" name="util-linux-debugsource" arch="ppc64le">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="a762192091a4075b1667b43390e990df9b09d762b43951b6a356508547f3d797eb398bcb8828639ab27c780d09e69e5fddca17feacb785d574ddcf21eb00d0e6" name="util-linux-debugsource" arch="riscv64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="1cad4d5d6769ab129bdd26b9b238a64b26f9d265d7672ea673b8737bd8fc589bc8f7a214c34bdaea567351fffd9cfdb11011ab77dfa6ddfcf34bbfe940e58d31" name="util-linux-debugsource" arch="s390x">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="9182a46647ed2ce56aac95b6404b53b376b1e95db207481e2fcdba66b56d6fb02c63e827ef6d2c522d0380365d6e4bec14d78e36d970401e5a33a16a6072a6c1" name="util-linux-debugsource" arch="x86_64">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="93ef5e86703c6487d4822879391a4016a42bd73bdb15c20d9d7b68ce493423e2448f5bbd8be18c6d72d209a345b79f62c531f7056ed5b2d8c396f0f536ceec13" name="util-linux-extra" arch="s390x">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="463ec6950a2dcb45df5bccee8bf6c49ab3a0298ffe1087ee5b4ff09b21bd0219a5d2bb11dc56bccc53c59d3b00ee513bd0429a9bb11c44857fd982b41476b21e" name="util-linux-extra-debuginfo" arch="s390x">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="81c1a1dc0d09b1887c42b1f50cbe2c59e8b7b4a9137d2cef3d3230e9477ca2991a86cbbfd39dd6354717affbb5558671120ee9ff09b9d62bebbf901967d234e8" name="util-linux-lang" arch="noarch">
  <version epoch="0" ver="2.42.2" rel="18.3"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="b2568f1a9372d6e8294cd421e8bdc7ceb22bac5b1afe7da9390712f3013e822760fbcfc8393e879a791fc379be8574192c76d4d8dfb5c9d842ca064760928bd3" name="util-linux-systemd" arch="aarch64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="1e3e63f7cd3807d717b1d03415152cc2b2ea98522b19069af43c3ba6c1151149c14ab8d788507da327703eba868ffc0af7fcf615c3d7b4edd631789adc00789c" name="util-linux-systemd" arch="armv7hl">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="a13dfe63da2e423fb223ff5c58f732bb343d3826693bb6065993d7a1cbed856cdbef3dc4e361da76178a188e60a42e8c5bd39b6eb04e3d2125cc4ed88dc25ab2" name="util-linux-systemd" arch="ppc64le">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="68838176c21a1809b24e885c8bf08ace80f52a5f94e74ab2f9dd91d98f387e14da50bd05fd46ce29b5dfbf19477348c4acff267f4c2284cd0f819b66b160e1ac" name="util-linux-systemd" arch="riscv64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="76b12730dde2022f975fdbe15fe4f34bc62d34f916f3a02e73692016de7d9109e41153c6012655751bb1db65b39a0ae464185834cecbb20a971cb0a375fd26d0" name="util-linux-systemd" arch="s390x">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="b6107398f94fcad8e133a1e96cbfadee1a58bdbaafa92e8c2108631f7e2a98f2216ed9f365eba0f91b59df5cd55147bf6aea7b516469c33f40051f35bbbbc693" name="util-linux-systemd" arch="src">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="a1a405316d3f5b7c4ab2600734e44948a1474b7a176edeec4698e1c073b59c2f06f0496c077576ed836186f55dc4a8f0245dcd1e4d13a408dd463de6d1b7e484" name="util-linux-systemd" arch="x86_64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="8d2e3931f65a5e5fe0a5959adeca886959b2bc1c868933de81b46ab65a38871e2c0a82847766923976ba1ada1f8ce4cd8e1c9aa92ab07e9a000bff5ed4d8b597" name="util-linux-systemd-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="7a4406b62d76c8eb4609de815458079e7a5812900a0d68bf3ef33e59aa9a48e10796d750331a10bb9f902c92ddc2a1fe063662552ccc8de1d93b698658414a8f" name="util-linux-systemd-debuginfo" arch="armv7hl">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="70884cfe268f883e06a485ce15be59e4923decd00e346f693c69d17d3db23f79f85f442165db839afdb4a8bc98aad16e22352deaddd27703929808ad506c820c" name="util-linux-systemd-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="177328f19e97a9315d21491b48c774c0e8ff5e960380fc16e64c7d48309c8dab90b37445e027f2dba37ad027417e39561f6a4cee8e5f8f2f321fca9954a2a988" name="util-linux-systemd-debuginfo" arch="riscv64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="d512a416924ef823cd78847f612be00c992e983720e7601798ad531fb1dd90dba7aad0b2743686aade70853b60d7510b0f8d1d9a16ce456a6bab728571b55c68" name="util-linux-systemd-debuginfo" arch="s390x">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="2e58fbb15df6f92b5cee498c17caf8f9392d726db81bfb53b957a672ca04ae130ef2f9c71713cce543ea46663c1637c8f3d8bcadc6d1f0774130a58467261a02" name="util-linux-systemd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="b4addd6af89feba179248a9a1712c8f87bf66a19d3aeb3cb9ae3b9f137a6b1a9ccfe55a12b7374500ceaad487f06b7e86cea9f7a8de81e866e851cb87eff6399" name="util-linux-systemd-debugsource" arch="aarch64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="da7fb3eb57b885868e18db5b03c62daf1d5011dad9bcddbd04965fe2e8a03ea3477c08a93a83ae5e28524f6f177e6002dd27e7abaef0cf4db1025d351f09b548" name="util-linux-systemd-debugsource" arch="armv7hl">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="637336cfee01405e359ead6ff3964ff220d6bfbb273b64bfbffe70254e9fb96b4b89f019f36a0b0a74313ef8223048f23905b60ee0710b7b0440d58d8b032957" name="util-linux-systemd-debugsource" arch="ppc64le">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="171675e4295c1b95d8721a622e67974a0c673a5f44f4772b36a9aecf824de3bf86c84d18a2760c91d6e078bee5b11b464945185340c1a24aa0b0e1f6a466143d" name="util-linux-systemd-debugsource" arch="riscv64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="d6b08bdc1aea48b1642a4885f982b2bde72404263b7bc742999993256762d70595673f95ba5ee61838fe7d9903d97c627ff0024fb34eb2516dc763ca9c1dd549" name="util-linux-systemd-debugsource" arch="s390x">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="6f1638bddc99ec03572c90c640f9ff332ceacd53b482c9993a448276a7b3e2f1b68a382c59068bb094988d7da299425974e2a0bbcfcb90635ab2d27627d78fac" name="util-linux-systemd-debugsource" arch="x86_64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="44d3d4536091d03b0a9267c70c3032e0a34be150a5914e0a27dfccd6d693b38c66f6a7c489656cb1d99eba951aba973766415aea0a413bc55d4381c0a138c333" name="util-linux-tty-tools" arch="aarch64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="c0aabeaf2e2d358e34116a18708510422bd83ed0fb170bb82ed14487ae99ab08e0b4bcdf92ca013f1031893578e2cbfe21e7a1739204551893a4f6d891b273d1" name="util-linux-tty-tools" arch="armv7hl">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="60efbff3d39c8542cfcd36fbadc122f39a57a9ed2a99efbfb8f9b00e3df99f2c48bf8db85d88e28a86caced83912eca8c244146fa7eb2aee883c448208135dee" name="util-linux-tty-tools" arch="ppc64le">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="a40213beed6e66830726188887a92fda28432cb554de31f88bff33d2faa07d2b801b3d58aa4eaf2a67bb5f219ad07ad915249cf9dcc169791204eaddaa6462c6" name="util-linux-tty-tools" arch="riscv64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="9870f6db8a982c764186055ccaadeca13d69f1cb8e3eacfe4b089ebf182715a404d1cdc8429f0d75362ae5945e526c522cd86bf78cd40899505643477bfc0e42" name="util-linux-tty-tools" arch="s390x">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="a810b3015ab2c7bfaf163bee3bcdcde3815c553d8787b8b7051b842daf5f30db494ec4e57bd99b719b33a3b5ba88bbb1ae0dde09352e0caa56db4a09316f3110" name="util-linux-tty-tools" arch="x86_64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="0086db3dfaca7d771f9bb0e477744a48687a615eaf543eb24f87dd78d878ccf5185cdb8e75e9d07b7718e37131a9d89b0b8b31e5aac4fe82b40e8fa6281ac2ad" name="util-linux-tty-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="71117280a868ff3749da16609f5f7f8beff896d1be16e3ac2a754a7b13236bd4fab884c81644777776f76e1cca5e861199694145f71233c5c6804bcc8a24cc2d" name="util-linux-tty-tools-debuginfo" arch="armv7hl">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="8866b19d7c55a504fafcb5d7e2a9496bc20ac2722b4039d481e51a948f301069d4ff94a2a2330213af39ca27cbca5c13cb268ff999da0d444d0cc559b677e315" name="util-linux-tty-tools-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="0ec4cfb35e33d1d9da280e73769d815ce639dd1881d93dfa99c5c6e12b98757af8066a38289c01f736e17b2caf740cf910398a2aaa21811232a661ec90a8360e" name="util-linux-tty-tools-debuginfo" arch="riscv64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="333be19f5abf8fc1c04d2c15e23fb94cd67d3a034fa4cd581a8563ee6ffc88194f78008457dbf0369f51258a1490986d3a4b977ed3baa580c3b7695a902d8950" name="util-linux-tty-tools-debuginfo" arch="s390x">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="e91e3fa291334974d9302be7408eded200736fe54cb68ddb26e8680441734edb13d22e064e33859f76bc6acff8146905d0891dec986dead5093ea8a3916f01b2" name="util-linux-tty-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="f63a4a08382adeb972caa91cedcd2465c9fa8a297dd877e0bd9bb347d681e5b82bebceda076874826976af495d7ae371c9f0fefcac2f314f09394d8bdb01b4c2" name="uuidd" arch="aarch64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="eb4b4bbf600bee551632552bff278a7a1691e735bb570503ebfd8bda98fce8788f861857dd4e3f05d013ad881bb05b49fa5f86c16b749608c41e93d06dd97786" name="uuidd" arch="armv7hl">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="808ed315f38eabe34954eb7f3441310fa135aefdeff307af3f674a436d6336eddae0a5fa10d5b415d391b864e26c937de1f313fa1bb1a4a9351a7ce75b31a1af" name="uuidd" arch="ppc64le">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="b4cdc556be87a4a053776996c2744734b5378b4b2e6d2ce44e83b018c92d15aeb817898850df93849fb4f3f493d92dda9980e89b5af0788f72670ef934ef17c9" name="uuidd" arch="riscv64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="2f073ef1e84c43ce57471429ad3da91c4999e13f30788253ddd2d6e23bcbcd4a608b52aaaa804200c504e56c962bfa660a0759d9ae789e283f8195d1420da696" name="uuidd" arch="s390x">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="ad16360012db4d0027296076d307b7ce0941a359f5734b2e8e393c31b8b82683bb93a6564b3404970c24a772215e9b2b96bd6614f59f762fa30b9c9225eb46b4" name="uuidd" arch="x86_64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="7e3f7c794d56f2546bd5c33238121ce8c037b3fb58e6f47f0b20132e8996c28427ca955e43901284e627e6bcbd02af0814c33635ddc57802da6ab12e7d1406d6" name="uuidd-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="6dc5c27c13ea75f459e891af9cf8d891ed44e0db56d73722f5b0846526b8bd3e90d28f38f3aba2550d9012e785c10b74900dba13cc525e4eba0d2aa938e950e0" name="uuidd-debuginfo" arch="armv7hl">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="0085c9f385189861f7cd832f6b2150e5f576eb6a7dcaaf12d3833c5fa1c90d9970d36d053a615a91b4364051b19c10e5c6844f6612a29c66ea5a66bdc05f5a16" name="uuidd-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="0f4f881c7f577a0c234f8dbe939845f8250fac2d946963245439abb2b7f8a48e8e148ac6fca97902578a6d3c715d7df1780b0603c49eec643431cf12fc5a1015" name="uuidd-debuginfo" arch="riscv64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="f5787e6626ec26b10787043e2eb580343b80482f96a7a3e1309f7c69b216bf74fbdf9eb76faf17975e56ae7b354857db6ab7e49a3bb6c00d540c4e4f334b63e4" name="uuidd-debuginfo" arch="s390x">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
<package pkgid="e0880fa4903a3b8c3e19f8d0ef64d8368ecf0d16c3d3bf8f41cefd516aee5deb5b6045598e8cb0cef4f34e131f4748e099c5a58f19d7eca7a4ab864603db8d71" name="uuidd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.42.2" rel="18.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1758888000">- Add configs library and use it in agetty
  (gh#util-linux/util-linux#3752,
  util-linux-lib-configs.patch, util-linux-agetty-configs.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759060800">- Fix address matching in agetty (boo#1247371,
  util-linux-lib-netlink.patch).
- Update generated man pages (util-linux-man-generated.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1759233600">- agetty: use /usr/lib/issue.d for backward compatibility
  (util-linux-issuedir-usr-lib.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1760616000">- Include agetty netlink fixes from the final upstream commits
  (jsc#PED-8734, util-linux-lib-netlink.patch and
  util-linux-agetty-netlink.patch) and upstream fixes
  (util-linux-lib-netlink-fix1.patch,
  util-linux-lib-netlink-fix2.patch,
  util-linux-lib-netlink-fix3.patch and
  util-linux-agetty-netlink-fix4.patch).
- Fix configs library use in agetty (replace
  util-linux-issuedir-usr-lib.patch by upstream
  util-linux-lib-configs-fix1.patch,
  add util-linux-lib-configs-fix2.patch,
  util-linux-lib-configs-fix3.patch,
  util-linux-lib-configs-fix4.patch,
  util-linux-lib-configs-fix5.patch and
  util-linux-lib-configs-fix6.patch).
- Fix agetty erase of escape characters (relevant to bsc#1194818,
  util-linux-agetty-escape-erase.patch).
- Own /usr/lib/issue.d directory.
- Perform migration from issue-generator (jsc#PED-8734, fixes
  boo#1244446).
- Drop util-linux-agetty-ssh-host-keys.patch. This feature is not
  used in MicroOS any more.
- Remove Provides/Obsoletes for s390-32, upgrade from SLE11 SP1 is
  no more supported.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1767441600">- update to 2.41.3 (bsc#1254666, CVE-2025-14104):
  * added bash-completion for lsfd, blkpr
  * added missing mount options for bash-completion
  * libfdisk: fix off-by-one in maximum last sector calculation
    within MS-DOS-style partition tables
  * login-utils: fix setpwnam() buffer use [CVE-2025-14104]
  * losetup: sort 'O' correctly for the mutual-exclusive check to
    work
  * lscpu: use maximum CPU speed from DMI, avoid duplicate version
    string
  * lscpu: add a few missing ARM CPU identifiers
  * lsfd: fix memory leak related to stat_error_class
  * umount: consider helper return status for success message
  * wdctl: remove -d option leftover
  * misc: fix memory leak in setpwnam()</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1768478400">- Fix filelist for systemd flavor.</changelog>
  <changelog author="Martin Schreiner &lt;martin.schreiner@suse.com&gt;" date="1770724800">- Fix bsc#1222465.
- Add patch:
  * util-linux-bsc-1222465.patch
- Patch has already been merged upstream,
  and may be deleted during the next release.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1771848000">- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1772625600">- Do not create empty directories in /etc directly, but use
  mkdir -p in %post to keep mtime.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291200">- Make uuidd compatible with immutable mode (jsc#PED-16165).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777291201">- Update to version 2.42 (jsc#PED-16188):
  * Security fixes:
  * CVE-2026-27456: mount(8) TOCTOU symlink attack via loop
    device (bsc1261606).
  * CWE-190 - Integer overflow in libblkid parse_dos_extended()
    (boo#1222465, obsoletes
    util-linux-bsc-1222465.patch).
  * login(1): now uses the original FQDN (as specified by
    "-h &lt;host&gt;") to configure the PAM RHOST item (bsc#1258859,
    CVE-2026-3184, obsoletes util-linux-CVE-2026-3184.patch).
  * login(1), if configured with LOGIN_SHELL_FALLBACK in
    login.defs, can fall back to another valid shell from
    /etc/shells if the user's configured shell is inaccessible due
    to administrative errors
    (refreshed util-linux-login_defs-check.sh).
  * agetty reads issue file(s) in a way compatible with libeconf
    and systemd, hermetic-usr and drop-ins are now supported. For
    more details see
    https://uapi-group.org/specifications/specs/configuration_files_specification/
    (obsoletes util-linux-agetty-configs.patch,
    util-linux-lib-configs-fix1.patch,
    util-linux-lib-configs-fix2.patch
    util-linux-lib-configs-fix3.patch
    util-linux-lib-configs-fix4.patch
    util-linux-lib-configs-fix5.patch
    util-linux-lib-configs-fix6.patch
    util-linux-lib-configs.patch).
  * agetty uses netlink to get network interface information for
    issue file output (obsoletes
    util-linux-agetty-netlink-fix4.patch,
    util-linux-agetty-netlink.patch,
    util-linux-lib-netlink-fix1.patch,
    util-linux-lib-netlink-fix2.patch,
    util-linux-lib-netlink-fix3.patch,
    util-linux-lib-netlink-fix5.patch,
    util-linux-lib-netlink.patch,
    util-linux-man-generated.patch).
  * The libsmartcols-based tools with JSON support can now produce
    additional JSON formats. The output format may be changed by
    LIBSMARTCOLS_JSON={lines,compact} environment variable.
  * column(1) now supports colors.
  * New command copyfilerange(1) to copy file ranges using the
    copy_file_range() syscall.
  * New command getino(1) to print the unique inode number
    associated with a process file descriptor or namespace for a
    given PID.
  * fadvise(1) now supports --fd to address a file by file
    descriptor rather than by path.
  * fallocate(1) now supports --report-holes to scan the file and
    report the distribution of holes.
  * A significant performance regression has been fixed in
    hardlink(1).
  * hardlink(1) now supports FIEMAP-based sparse file optimization.
  * kill(1), waitpid(1) and nsenter(1) now support the PID:INO
    convention to precisely address processes.
  * mount(8) now supports --beneath to atomically replace a
    filesystem at a mountpoint.
  * mount(8) now supports --exclusive to ensure that the filesystem
    is mounted as a unique instance and that the superblock is not
    reused by the kernel.
  * libmount now reads filesystem information from udevd (with
    fallback to classic libblkid-based detection). This feature can
    be disabled by --disable-libmount-udev-support.
  * setarch(8) now supports --pid to show the personality of a
    specified process.
  * The pager support for tools like "dmesg -H" has been improved
    to work better with signals.
  * losetup(8) now supports --remove to remove a loop device node
    from the system.
  * lsblk(8), lslocks(8), lsmem(1) and lsclocks(1) support
    &lt;NAME&gt;_COLUMNS environment variable to specify output columns
    as an alternative to --output.
  * lsfd(1) now supports new UNIX.IPEER, PACKET.PROTOCOL.RAW and
    TUN.DEVNETNS columns.
  * setpriv(1) now supports landlock via --landlock-access and
  - -landlock-rule options.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes
- Refreshed patch: util-linux-bash-completion-su-chsh-l.patch.
- Dropped upstream patch: util-linux-agetty-escape-erase.patch.
- Fix build wih libeconf
  (util-linux-fix-build-with-libeconf.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982400">- Fix su passing argument regression
  (util-linux-su-revert-su-pass-arguments.patch).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1778068800">- Temporarily disable following test that do not work properly
  in pre-16.1 IBS:
  * lsfd/option-hyperlink
  * lsfd/option-inet
  * lsfd/mkfds_udp
  * lsfd/mkfds_udp6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1779364800">- Rename TS_OPT_misc_setarch_known_fail to
  TS_OPT_setarch_setarch_known_fail to follow move of setarch test</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python-rpm-macros BR</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1779624000">- Update to version 2.42.1:
  * agetty: Always call chdir after chroot
  * bits:
  * use getline() to avoid stdin input truncation
  * prevent unsigned integer underflow and long-lived loop
  * cfdisk: fix memory leak of original_layout table
  * chrt:
  * Fix confusing error messages when priority argument is
    required
  * Only show current scheduling policy when pid is given
  * pass correct integer types to printf
  * column: fix missing out-of-bounds check in table reordering
  * dmesg: fix out-of-bounds read when parsing malformed kmsg file
  * eject: tolerate ILLEGAL REQUEST on ALLOW_MEDIUM_REMOVAL
  * fdisk: fix trailing whitespace in user reply from readline
    completion
  * flock: re-enable the initial shell selection logic
  * hardlink: avoid format string error for dev_t
  * ipcutils: use memset explicitly to fill bpf_attr with zero
  * irqtop/lsirq: Handle EOF in get_irqinfo
  * last: fix phantom detection for unset loginuid and X11 sessions
  * libblkid:
  * Fix typo in probe_zfs
  * Fix type access in zfs_extract_guid_name
  * Fix debug OOB read in zfs_process_value
  * Fix parse_dev debug output
  * Ignore secondary LUKS2 header in blkid_do_safeprobe()
  * reiserfs add block size validation for reiser4
  * erofs validate blkszbits before checksum calculation
  * exfs avoid 32-bit overflow in rextsize validation
  * solaris use 64-bit for partition offset calculations
  * bsd use 64-bit for partition offset calculations
  * mac use 64-bit for partition offset calculations
  * dos use 64-bit for partition offset calculations
  * udf avoid 32-bit overflow in offset calculations
  * vfat avoid 32-bit overflow in offset calculations
  * ubi fix probe return values
  * f2fs tighten log_blocksize validation
  * nilfs fix byte order and block size validation
  * gpt fix wiper offset to use sector size
  * udf cap descriptor sequence iteration count
  * bcache add missing NULL check
  * bsd read enough data to cover disklabel struct
  * befs improve bounds checking in B+ tree search
  * ntfs improve integer overflow checks
  * introduce sysfs_devno_is_dm_hidden() for pre-open check
  * liblastlog2: wait on busy SQLite connections
  * libmount:
  * return btrfs rootfs from get_btrfs_fs_root()
  * use match_source for mountinfo comparison
  * libuser:
  * fix misleading error message
  * login:
  * Clean up PAM resources on error path
  * login-utils/auth:
  * Drop pam_setcred
  * lsclocks:
  * add missing newline character in option description
  * lsfd:
  * use memset explicitly to fill bpf_attr with zero
  * mkfs.cramfs:
  * Consider -i only once
  * Add -p padding only once
  * Improve file size check
  * mkswap:
  * Fix --file chmod(2) check when file exists
  * more:
  * align MORE_SHELL_LINES semantics with less(1)
  * newgrp:
  * Correctly handle getline error
  * nsenter:
  * Fix AT_HANDLE_FID on musl
  * script:
  * fix "--" separator when used as option argument
  * fix command and command_norm memory leaks
  * fix backward compatibility for options after non-option args
  * strutils:
  * fix printf formats
  * su:
  * Clean up PAM resources on all error paths
  * fix grammar on man page
  * revert "su pass arguments after &lt;user&gt; to shell" (obsoletes
    util-linux-su-revert-su-pass-arguments.patch)
  * tests: (lsfd/*) make UDPLite related test cases skippable
  * write:
  * cleanup indentation and whitespace
  * use mem2strcpy() for utmp strings
  * always use utmp as fallback
  * write, mesg:
  * add S_ISCHR() check for terminal device paths
  * Misc:
  * Fix build with libeconf (obsoletes util-linux-fix-build-with-libeconf.patch)
  * Update translations.
- Swith NTFS mounttype from the default "ntfs3" to "ntfs"
  (boo#1264688).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944000">- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1783944001">- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (for linux &lt; 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- INCOMAPTIBLE CHANGE:
  LIBMOUNT_FORCE_MOUNT2 is ignored for unprivileged users for safety
  reasons.
- Update to version 2.42.2:
  * Security fixes:
  * CVE-2026-53613 - mount(8) TOCTOU race on target path.  The
    SUID mount does not pin the mount target directory, allowing
    a race between path resolution and the actual mount syscall.
    A local attacker can swap an ancestor directory component
    between these steps to redirect a mount to an arbitrary
    location. (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g)
  * CVE-2026-53612 - mount(8) TOCTOU race on post-mount
    owner/mode change.  The X-mount.owner, X-mount.group, and
    X-mount.mode options use path-based lchown()/chmod() after
    mounting.  An attacker can swap the target between mount and
    the ownership/mode change to gain control of arbitrary
    files. (bsc#1268886, CVE-2026-53612, GHSA-g8wm-75wr-g2vh)
  * CVE-2026-53614 - mount(8) SUID bypass via
    LIBMOUNT_FORCE_MOUNT2.  The environment variable
    LIBMOUNT_FORCE_MOUNT2 is not filtered via safe_getenv() in
    SUID context.  A local attacker can force the legacy
    mount(2) code path, which uses a two-step bind+remount or
    propagation sequence with a window where security flags
    (nosuid, noexec,...) are not yet applied. (bsc#1268886,
    CVE-2026-53614, GHSA-67r7-8m5w-22wx)
  * CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop
    device (follow-up).  The v2.42.1 fix used O_NOFOLLOW which
    only rejects symlinks at the last path component.  This
    update uses openat2(RESOLVE_NO_SYMLINKS) to reject symlinks
    at any component of the backing file path. (bsc#1268886#c2,
    bsc#1261606)
  * libblkid: use-after-free in nested partition probing.  The
    partitions list stores partitions in a contiguous array
    grown by reallocarray().  When the array is reallocated, all
    existing blkid_partition pointers become dangling.
    (bsc#1269583, bsc#1268886#c2, CVE-2026-13595)
  * fdisk-list:
  * fix memory leak when partition returns empty string
  * fix memory leak in partition listing
  * fsck.minix: bound namelen guessed in get_dirsize
  * hexdump: fix buffer overflow in color_cond()
  * libblkid: fix use-after-free in nested partition probing
  * libfdisk: fix use of on-disk sizeof_partition_entry in GPT
  * libmount:
  * add mount ID verification and man page TOCTOU note
  * use fd_target in hook_idmap for move_mount()
  * restrict X-mount.subdir for non-root to Linux &gt;= 6.15
  * use fd-based fchownat/chmod in hook_owner
  * ignore X-mount.nocanonicalize for restricted users
  * add fd_target to context for TOCTOU prevention
  * fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
    path
  * detect fanotify queue overflow in monitor
  * fix subvolid buffer overflow in get_btrfs_fs_root
  * loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  * lscpu: free cputype ISA string
  * lslogins: bound lastlog2 tty/host copy to destination size
  * nsenter: Fix invalid fd check in enter_namespaces
  * readprofile: replace popen() with fork/exec for .gz map files
- Refreshed
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- If needed, display post installation message.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1785758400">- Fix post installation message conditions (bsc#1268886#c17).</changelog>
</package>
</otherdata>