update to current version to get fixes

boo#1257875,bsc#1250513,bsc#1249686,boo#1248158,bsc#1247286
jsc#PED-14803,jsc#PED-13807

_servicedata

@@ -1,5 +1,5 @@
 <servicedata>
 <service name="tar_scm">
                 <param name="url">https://github.com/openSUSE/aaa_base.git</param>
-              <param name="changesrevision">1cad3bc8eb7146f6f45ba8f3cf960f67719fbbb6</param></service>
+              <param name="changesrevision">ecce285cefe9674b3649b17ec6a4c1487ae974f5</param></service>
 </servicedata>

aaa_base.changes

@@ -1,3 +1,83 @@
+-------------------------------------------------------------------
+Tue Feb 10 09:27:08 UTC 2026 - Ruediger Oertel <ro@suse.com>
+
+- Update to version 84.87+git20260210.ecce285:
+  * For boo#1257875 get intrinsic DEFAULT_WM back
+  * DIR_COLORS: add vt220 and .jxl
+
+-------------------------------------------------------------------
+Mon Jan 12 11:35:46 UTC 2026 - Ruediger Oertel <ro@suse.com>
+
+- Update to version 84.87+git20260112.8f614f3:
+  * add ghost entries for the removed dirs
+  * Revert list directories above all normal files.
+
+-------------------------------------------------------------------
+Sun Dec 28 11:23:07 UTC 2025 - Ruediger Oertel <ro@suse.com>
+
+- Update to version 84.87+git20251217.34fd7bc:
+  * add tmpfiles template adm-backup.conf (jsc#PED-14803)
+  * Revert ec7f00fa60f11d28b427f2e224822a7b81825806
+  * Fix old script to support copy mode as well
+  * Support for XDG environment variables for the su,
+  * adapted sugggestions
+  * Patching nsswitch.conf only if it has not been generated by nsswitch-config (JIRA-#PED-13807).
+  * Avoid nasty exceptions running tput
+
+-------------------------------------------------------------------
+Tue Nov 11 09:27:26 UTC 2025 - Ruediger Oertel <ro@suse.com>
+
+- Update to version 84.87+git20251111.509a363:
+  * Avoid escape sequences on dump terminal of s390
+
+-------------------------------------------------------------------
+Tue Nov 11 08:00:26 UTC 2025 - Dominique Leuenberger <dimstar@opensuse.org>
+
+- Update to version 84.87+git20251111.16d9d43:
+  * Set XDG environment variables consistently without trailing slash
+
+-------------------------------------------------------------------
+Mon Nov 10 15:47:37 UTC 2025 - Ruediger Oertel <ro@suse.com>
+
+- Update to version 84.87+git20251110.af063e6:
+  * Avoid escape sequences on dump terminal of s390
+  * Set erase character from kbs entry of terminfo
+
+-------------------------------------------------------------------
+Thu Oct 30 13:29:10 UTC 2025 - Thorsten Kukuk <kukuk@suse.com>
+
+- Update to version 84.87+git20251030.441f926:
+  * Add systemd to /etc/nsswitch.conf [bsc#1250513]
+  * Add group-directories-first option
+  * prevent normal users from accessing dmesg (bsc#1249686)
+  * Use explicit defaults for XDG environment variables
+
+-------------------------------------------------------------------
+Wed Sep 03 12:23:39 UTC 2025 - Ruediger Oertel <ro@suse.com>
+
+- Update to version 84.87+git20250903.33e5ba4:
+  * Correct fix for boo#1247495 (boo#1248158)
+
+-------------------------------------------------------------------
+Tue Aug 05 15:28:33 UTC 2025 - Ruediger Oertel <ro@suse.com>
+
+- Update to version 84.87+git20250805.3069494:
+  * Remove initviocons for tcsh as well and
+  * Update csh.login
+  * Add missing quoting and remove unneeded uses of eval
+
+-------------------------------------------------------------------
+Fri Aug 01 09:04:06 UTC 2025 - Thorsten Kukuk <kukuk@suse.com>
+
+- Update to version 84.87+git20250801.f305627:
+  * Remove sysconfig.language [bsc#1247286]
+
+-------------------------------------------------------------------
+Fri Aug 01 08:53:32 UTC 2025 - Thorsten Kukuk <kukuk@suse.com>
+
+- Update to version 84.87+git20250801.b2fa3fe:
+  * Allow /etc/locale.conf to have no newline
+
 -------------------------------------------------------------------
 Tue Apr 29 16:08:04 UTC 2025 - Ruediger Oertel <ro@suse.com>
 
@@ -1105,7 +1185,7 @@ Mon Jan 26 12:30:54 UTC 2015 - werner@suse.de
 - Merge pull request #21 from arvidjaar/bnc/907873
 
 -------------------------------------------------------------------
-Fri Dec 5 10:55:09 2014 UTC arvidjaar@gmail.com
+Fri Dec 5 10:55:09 UTC 2014 - arvidjaar@gmail.com
 
 - Avoid sourcing /etc/bash_completion.d twice
 

aaa_base.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package aaa_base
 #
-# Copyright (c) 2025 SUSE LLC
+# Copyright (c) 2026 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -33,7 +33,7 @@ BuildRequires:  git-core
 %endif
 
 Name:           aaa_base
-Version:        84.87+git20250429.1cad3bc%{git_version}
+Version:        84.87+git20260210.ecce285%{git_version}
 Release:        0
 Summary:        openSUSE Base Package
 License:        GPL-2.0-or-later
@@ -104,7 +104,7 @@ for Linux. It should only be installed on WSL and not on regular Linux
 systems.
 
 %package yama-enable-ptrace
-Summary:        sysctl setting to allow ptrace with the YAMA LSM enabled
+Summary:        Sysctl setting to allow ptrace with the YAMA LSM enabled
 Group:          System/Fhs
 Requires:       %{name} = %{version}
 
@@ -163,18 +163,30 @@ mkdir -p %{buildroot}%{_fillupdir}
 %post
 export LC_ALL=C
 
-#XXX Fix /etc/nsswitch.conf to include usrfiles [bsc#1162916]
 if [ -e /etc/nsswitch.conf ]; then
-    for key in services protocols rpc ; do
+   if [ ! -f /bin/nsswitch-config ] ||
-	if ! grep -q "^${key}.*usrfiles" /etc/nsswitch.conf ; then
+      ! /bin/nsswitch-config --is_generated >/dev/null 2>&1; then
-	    cp /etc/nsswitch.conf "/etc/nsswitch.conf.pre-usrfiles.${key}"
+        # /etc/nsswitch.conf has not been generated by nsswitch-config.
-	    sed -i -e "s|^\(${key}:.*[[:space:]]\)files\([[:space:]].*\)*\$|\1files usrfiles\2|" /etc/nsswitch.conf
+        # So it has to be patched manually
-	fi
+        #XXX Fix /etc/nsswitch.conf to include usrfiles [bsc#1162916]
-    done
+        for key in services protocols rpc ; do
+            if ! grep -q "^${key}:.*usrfiles" /etc/nsswitch.conf ; then
+                cp /etc/nsswitch.conf "/etc/nsswitch.conf.pre-usrfiles.${key}"
+                sed -i -e "s|^\(${key}:.*[[:space:]]\)files\([[:space:]].*\)*\$|\1files usrfiles\2|" /etc/nsswitch.conf
+            fi
+        done
+        # Fix /etc/nsswitch.conf to include systemd [bsc#1250513]
+        for key in passwd group shadow ; do
+            if ! grep -q "^${key}:.*systemd" /etc/nsswitch.conf ; then
+                cp /etc/nsswitch.conf "/etc/nsswitch.conf.pre-systemd.${key}"
+                sed -i "/^${key}:/ s/$/ systemd/" /etc/nsswitch.conf
+            fi
+        done
+    fi
 fi
 
-%{fillup_only -n language}
 %{fillup_only -n proxy}
+%tmpfiles_create soft-reboot-cleanup.conf
 %service_add_post soft-reboot-cleanup.service
 
 %postun
@@ -185,6 +197,7 @@ fi
 
 %post extras
 %fillup_only -n backup
+%tmpfiles_create adm-backup.conf
 %service_add_post backup-rpmdb.service backup-rpmdb.timer backup-sysconfig.service backup-sysconfig.timer check-battery.service check-battery.timer setup-systemd-proxy-env.path setup-systemd-proxy-env.service
 
 %preun extras
@@ -241,6 +254,9 @@ fi
 /usr/etc/profile.d/ls.zsh
 /usr/etc/profile.d/terminal.sh
 /usr/etc/profile.d/terminal.csh
+%dir /usr/etc/security/
+%dir /usr/etc/security/pam_env.conf.d/
+/usr/etc/security/pam_env.conf.d/xdg.conf
 %dir /usr/lib/environment.d
 /usr/lib/environment.d/50-xdg.conf
 /usr/lib/systemd/system/soft-reboot-cleanup.service
@@ -265,7 +281,6 @@ fi
 /usr/lib/sysctl.d/50-pid-max.conf
 %endif
 /usr/lib/sysctl.d/51-network.conf
-%{_fillupdir}/sysconfig.language
 %{_fillupdir}/sysconfig.proxy
 
 %files extras
@@ -278,8 +293,9 @@ fi
 /usr/lib/base-scripts/check-battery
 /usr/lib/systemd/system/[bc]*
 /usr/lib/systemd/system/setup-systemd-proxy-env.*
-/var/adm/backup/rpmdb
+%ghost %dir /var/adm/backup/rpmdb
-/var/adm/backup/sysconfig
+%ghost %dir /var/adm/backup/sysconfig
+%{_tmpfilesdir}/adm-backup.conf
 %{_fillupdir}/sysconfig.backup
 
 %files malloccheck