util-linux-2.41.1-160000.5.1

- lib/fileutils: add ul_openat_resolve() openat2 wrapper
  (bsc#1275441,
  util-linux-bsc1275441-01-lib-fileutils-add-ul_openat.patch)
- lib/fileutils: fix RESOLVE_NO_SYMLINKS fallback value
  (bsc#1275441,
  util-linux-bsc1275441-02-lib-fileutils-fix-RESOLVE_NO_SYMLINKS.patch)
- lib/fileutils: fix unused parameter warnings without SYS_openat2
  (bsc#1275441,
  util-linux-bsc1275441-03-lib-fileutils-fix-unused-parameter.patch)
- libmount: add missing fileutils.h include to hook_idmap.c
  (bsc#1275441,
  util-linux-bsc1275441-04-libmount-add-missing-fileutils_h.patch)
- libmount: add mnt_open_tree() helper for safe tree opening
  (bsc#1275441,
  util-linux-bsc1275441-05-libmount-add-mnt_open_tree.patch)
- libmount: pin source path with openat2() for restricted users
  (bsc#1275441, bsc#1278347, CVE-2026-78410,
  util-linux-bsc1275441-06-libmount-pin-source-path-with-openat2.patch)
- libmount: restrict source path canonicalization for non-root
  users (bsc#1275441, bsc#1278347, CVE-2026-78410,
  util-linux-bsc1275441-07-libmount-restrict-canonicalization.patch)
- libmount: skip post-mount hooks after failed mount helper
  (bsc#1275441, bsc#1278349, CVE-2026-76642,
  util-linux-bsc1275441-08-libmount-post-mount-after-failure.patch)
- libmount: use USE_LIBMOUNT_MOUNTFD_SUPPORT for idmap hook
  (bsc#1275441,
  util-linux-bsc1275441-09-libmount-USE_LIBMOUNT_MOUNTFD_SUPPORT.patch)
- nsenter: close cgroup.procs fd after join to prevent authority
  leak (bsc#1275441, bsc#1278348, CVE-2026-78408,
  util-linux-bsc1275441-10-nsenter-close-cgroup.procs-fd.patch)
- nsenter, unshare: add O_CLOEXEC to all open() calls (bsc#1275441,
  bsc#1278348, CVE-2026-78408,
  util-linux-bsc1275441-11-nsenter-unshare-CVE-CVE-2026-78408.patch)
- wall, write: sanitize hostname in banner header (bsc#1275441,
  util-linux-bsc1275441-12-wall-write-sanitize-hostname.patch)
- Add missing function. (bsc#1275441,
  util-linux-bsc1275441-ul_startswith.patch)

- ipcutils: Prevent using uninitialized variable (bsc#1268886#c13,
  util-linux-bsc1268886-ipcutil-uninitialized.patch).

- BREAKING CHANGE:
  Paths must always be canonicalized for unprivileged users to
  ensure safe target resolution. X-mount.nocanonicalize is ignored
  for them.
- INCOMAPTIBLE CHANGE (linux < 6.15):
  X-mount.subdir: The safe detached subdirectory is no more
  supported for unprivileged users for safety reasons.
- liblastlog2: Wait on busy SQLite connections (bsc#1268886#c3,
  util-linux-bsc1268886-01-wait-on-busy-SQLite-connections.patch).
- libmount: Fix subvolid buffer overflow in get_btrfs_fs_root
  (bsc#1268886#c2,
  util-linux-bsc1268886-02-libmount-subvolid-overflow.patch).
- libblkid: Fix use-after-free in nested partition probing
  (bsc#1269583, bsc#1268886#c2, CVE-2026-13595,
  util-linux-bsc1268886-03-libblkid-probe-use-after-free.patch).
- libmount: fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy
  mount path (bsc#1268886, CVE-2026-53614, GHSA-67r7-8m5w-22wx,
  util-linux-bsc1268886-04-libmount-LIBMOUNT_FORCE_MOUNT2.patch).
- fileutils: add ul_open_no_symlinks() needed by other patches
  (bsc#1268886,
  util-linux-bsc1268886-05-fileutils-ul_open_no_symlinks.patch).
- libmount: add fd_target to context for TOCTOU race condition
  prevention (bsc#1268886, CVE-2026-53613, GHSA-8gj5-72r3-428g,
  util-linux-bsc1268886-06-add-fd_target-to-context.patch).
- libmount: ignore X-mount.nocanonicalize for restricted users
  (bsc#1268886#c2,
  util-linux-bsc1268886-07-libmount-X-mount_nocanonicalize.patch).
- libmount: use fd-based fchownat/chmod in hook_owner (bsc#1268886,
  CVE-2026-53612, GHSA-g8wm-75wr-g2vh,
  util-linux-bsc1268886-08-libmount-use-fd-based-fchownat.patch).
- libmount: restrict X-mount.subdir for non-root (bsc#1268886#c2,
  util-linux-bsc1268886-09-libmount-restrict-X-mount_subdir.patch).
- libmount: use fd_target in hook_idmap for move_mount()
  (bsc#1268886#c2,
  util-linux-bsc1268886-10-libmount-move_mount.patch).
- libmount: add mount ID verification and man page TOCTOU note
  (bsc#1268886#c2,
  util-linux-bsc1268886-11-libmount-mount-ID-verification.patch).
- loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
  (bsc#1268886#c2, bsc#1261606, follow up for CVE-2026-27456,
  util-linux-bsc1268886-12-loopdev-openat2.patch).
- Regenerate man pages (util-linux-bsc1268886-man-generated.patch).
- If needed, display post installation message (bsc#1268886#c17).

- Ignore pam-config error that prevents update failure if common*
  pam configuration is not symlink to common-*-pc (bsc#1270219).

- loopdev: Prevent unauthorized read access to symlinked filesystem
  images (bsc#1261606, CVE-2026-27456,
  util-linux-CVE-2026-27456.patch).

- fdisk: Fix possible partition overlay and data corruption if EBR
  gap is missing (boo#1222465,
  util-linux-libfdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-2.patch,
  util-linux-libfdisk-ebr-missing-gap-2.patch,
  util-linux-tests-fdisk-ebr-missing-gap-3.patch).

- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).

- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).

- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).

- Update to version 2.41.1:
  * cfdisk: fix memory leak and possible NULL dereference
  * fdisk: fix possible memory leak
  * findmnt: fix -k option parsing regression (boo#1242705,
    drop util-linux-libblkid-econf-parse.patch)
  * hardlink: fix performance regression
  * include/cctype: fix string comparison
  * libblkid:
  * Fix crash while parsing config with libeconf
  * befs fix underflow
  * avoid strcasecmp() for ASCII-only strings
  * libblkid/src/topology/dm: fix fscanf return value check to
    match expected number of parsed items
  * libmount:
  * (subdir) restrict for real mounts only
  * (subdir) remove unused code
  * avoid calling memset() unnecessarily
  * fix --no-canonicalize regression (boo#1244251,
    drop libmount-fix-no-canonicalize-regression.patch)
  * lsblk:
  * use ID_PART_ENTRY_SCHEME as fallback for PTTYPE
  * avoid strcasecmp() for ASCII-only strings
  * lscpu:
  * fix possible buffer overflow in cpuinfo parser
  * Fix loongarch op-mode output with recent kernel
  * lsfd:
  * scan the protocol field of /proc/net/packet as a hex number
  * fix the description for PACKET.PROTOCOL column
  * lsns:
  * enhance compilation without USE_NS_GET_API
  * fix undefined reference to add_namespace_for_nsfd #3483
  * more:
  * fix broken ':!command' command key
  * fix implicit previous shell_line execution #3508
  * tests: (test_mkfds::mapped-packet-socket) add a new parameter,
    protocol
  * treewide:
  * add ul_ to parse_timestamp() function name
    (drop util-linux-rename-common-symbols-4.patch)
  * add ul_ to parse_switch() function name
    (drop util-linux-rename-common-symbols-3.patch)
  * add ul_ to parse_size() function name
    (drop util-linux-rename-common-symbols-2.patch)
  * add ul_ to parse_range() function name
    (drop util-linux-rename-common-symbols-1.patch)
  * fix optional arguments usage
  * avoid strcasecmp() for ASCII-only strings
  * Wipefs: improve --all descriptions for whole-disks
  * Misc: Do not call exit() on code ending in shared libraries
  * Other fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.41/v2.41.1-ReleaseNotes
- Fix problem with uname26 listed twice.

- Fix libmount --no-canonicalize regression (boo#1244251,
  gh#util-linux/util-linux#3479,
  libmount-fix-no-canonicalize-regression.patch).

- Add ul_ prefix to functions with common names. Fixes btrfsprogs
  build failure (gh#util-linux/util-linux#3603,
  util-linux-rename-common-symbols-1.patch,
  util-linux-rename-common-symbols-2.patch,
  util-linux-rename-common-symbols-3.patch,
  util-linux-rename-common-symbols-4.patch).

- Fix segfault of findmnt (boo#1242705,
  gh#util-linux/util-linux#3574,
  util-linux-libblkid-econf-parse.patch).

- Enable mountfd support again (jsc#PED-9752).
  BREAKING CHANGE
  Mountfd is nearly completely compatible with the old mount. There
  is a special case that cannot be handled by mountfd, and it needs
  to be handled by applications:
  Mountfd discriminates between physical mount layer and virtual
  mount layer. Once the physical mount layer is read-only,
  read-write mount on the virtual layer is not possible.
  If the first mount is read only, then the physical filesystem is
  mounted read-only, and later mount of the same file system as
  read-write is not possible. To solve this problem, the first
  mount needs to be read-only only on the virtual layer, keeping
  the physical layer read-write.
  The user space fix is simple:
  Instead of
    mount -oro
  use
    mount -oro=vfs
  This will keep the physical layer read-write, but the virtual
  file system layer (and the user space access) will be read-only.

- Update to version 2.41:
  * agetty: Fixed an issue where issue files were not being printed
    from additional locations, such as /run or /usr/lib. This
    change now allows for the use of local information from /etc,
    in addition to generated files from /run and
    distribution-specific files from /usr/lib.
  * cfdisk and sfdisk: Added support for the --sector-size command
    line option.
  * sfdisk: Added a new option, --discard-free.
  * fdisk: Added a new command, 'T', to discard sectors.
  * chrt: The --sched-runtime now supports SCHED_{OTHER,BATCH}
    policies.
  * column: Can now handle ANSI SGR colors inside OSC 8 hyperlink
    escape codes and sequences.
  * enosys: Can now dump defined filters.
  * libmount:
  * Added experimental support for statmount() and listmount()
    syscalls.
  * This new functionality can be accessed using "findmnt
  - -kernel=listmount".
  * Added a new mount option,
    X-mount.nocanonicalize[=source|target].
  * Added new mount extensions to the "ro" flag (ro[=vfs,fs]).
  * Added a new option, X-mount.noloop, to disable automatic loop
    device creation.
  * Now supports bind symlinks over symlinks.
  * Reads all kernel info/warning/error messages from new API
    syscalls (and mount(8) prints them).
  * libuuid: Now supports RFC9562 UUIDs.
  * findmnt, lsblk, and lsfd: Added a new --hyperlink command line
    option to print paths as terminal hyperlinks.
  * findmnt: Can now address filesystems using --id and --uniq-id
    (requires listmount() kernel support).
  * flock: Added support for the --fcntl command line option.
  * hardlink: Can now prioritize specified trees on the command
    line using --prioritize-trees.
  * Can exclude sub-trees using --exclude-subtree or keep them in
    the current mount using --mount.
  * Duplicates can now be printed using --list-duplicates.
  * hwclock: Added a new --param-index option to address position
    for RTC_PARAM_{GET,SET} ioctls.
  * kill: Can now decode signal masks (e.g. as used in /proc) to
    signal names.
  * libblkid: Made many changes to improve detection, including
    exfat, GPT, LUKS2, bitlocker, etc.
  * login: Added support for LOGIN_ENV_SAFELIST in /etc/login.def.
  * lsfd: Now supports pidfs and AF_VSOCK sockets.
  * lsipc, ipcmk, ipcrm: Now supports POSIX ipc.
  * lslogins: Now supports lastlog2.
  * lsns: Added support for the --filter option.
  * build by meson: Now supports translated man pages and has fixed
    many bugs.
  * mkswap: The option --file should now be usable on btrfs.
  * nsenter: Improved support for pidfd and can now join target
    process's socket net namespace.
  * scriptlive: Added a new option, --echo <never|always|auto>.
  * zramctl: Now supports COMP-RATIO and --algorithm-params.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.41/v2.41-ReleaseNotes
- Update util-linux-login_defs-check.sh:
  * Make instructions up to date.
  * Update checksum reflecting the shadow update.
- Refresh libmount-print-a-blacklist-hint-for-unknown-filesyst.patch.

- Delete /usr/sbin/rc* symlinks
- Drop bashisms from build recipe

- Create and own directories /etc/blkid.conf.d and
  /usr/etc/blkid.conf.d (boo#1235887#c3).
- Add missingok for /etc/blkid.conf.

- Move blkid.conf to /usr/etc (boo#1235887).

- Update to version 2.40.4:
  * agetty: Prevent cursor escape (bsc#1194818, drop
    util-linux-agetty-prevent-cursor-escape.patch)
    add "systemd" to --version output\
  * chcpu(8): Document CPU deconfiguring behavior
  * fdisk: SGI fixes
  * hardlink: fix memory corruption
  * hardlink.1 directory|file is mandatory
  * lib/env: fix env_list_setenv() for strings without '='
  * libblkid:
    (exfat) validate fields used by prober
    (gpt) use blkid_probe_verify_csum() for partition array
    checksum
    add FSLASTBLOCK for swaparea
    bitlocker fix version on big-endian systems
  * libfdisk: make sure libblkid uses the same sector size
  * libmount:
    extract common error handling function
    propagate first error of multiple filesystem types
  * logger: correctly format tv_usec
  * lscpu: Skip aarch64 decode path for rest of the architectures
    (bsc#1229476, drop util-linux-lscpu-skip-aarch64-decode.patch)
  * lsns: ignore ESRCH errors reported when accessing files under
    /proc
  * mkswap: set selinux label also when creating file
  * more: make sure we have data on stderr
  * nsenter: support empty environ
  * umount, losetup: Document loop destroy behavior
    (bsc#1159034, drop
    util-linux-umount-losetup-lazy-destruction.patch,
    util-linux-umount-losetup-lazy-destruction-generated.patch).
  * uuidd: fix /var/lib/libuuid mode uuidd-tmpfiles.conf
    fix /var/lib/libuuid mode uuidd-tmpfiles.conf
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.3-ReleaseNotes
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.4-ReleaseNotes
  - Refresh util-linux.keyring. Key validity was extended.