update to current version to get fixes

boo#1257875,bsc#1250513,bsc#1249686,boo#1248158,bsc#1247286
jsc#PED-14803,jsc#PED-13807

.gitattributes

@@ -22,4 +22,4 @@
 *.zip filter=lfs diff=lfs merge=lfs -text
 *.zst filter=lfs diff=lfs merge=lfs -text
 ## Specific LFS patterns
-aaa_base-84.87+git20240906.742565b.tar filter=lfs diff=lfs merge=lfs -text
+aaa_base-84.87+git20250429.1cad3bc.tar filter=lfs diff=lfs merge=lfs -text

_servicedata

@@ -1,5 +1,5 @@
 <servicedata>
 <service name="tar_scm">
                 <param name="url">https://github.com/openSUSE/aaa_base.git</param>
-              <param name="changesrevision">742565b964545a2618f0809a3219cf0cdf185cd3</param></service>
+              <param name="changesrevision">ecce285cefe9674b3649b17ec6a4c1487ae974f5</param></service>
 </servicedata>

aaa_base-84.87+git20240906.742565b.tar

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:a955b86b99b50f658006fddedc73e64b963a40ce6b76af50e214842165b9e57a
-size 348160

aaa_base.changes

@@ -1,3 +1,135 @@
+-------------------------------------------------------------------
+Tue Feb 10 09:27:08 UTC 2026 - Ruediger Oertel <ro@suse.com>
+
+- Update to version 84.87+git20260210.ecce285:
+  * For boo#1257875 get intrinsic DEFAULT_WM back
+  * DIR_COLORS: add vt220 and .jxl
+
+-------------------------------------------------------------------
+Mon Jan 12 11:35:46 UTC 2026 - Ruediger Oertel <ro@suse.com>
+
+- Update to version 84.87+git20260112.8f614f3:
+  * add ghost entries for the removed dirs
+  * Revert list directories above all normal files.
+
+-------------------------------------------------------------------
+Sun Dec 28 11:23:07 UTC 2025 - Ruediger Oertel <ro@suse.com>
+
+- Update to version 84.87+git20251217.34fd7bc:
+  * add tmpfiles template adm-backup.conf (jsc#PED-14803)
+  * Revert ec7f00fa60f11d28b427f2e224822a7b81825806
+  * Fix old script to support copy mode as well
+  * Support for XDG environment variables for the su,
+  * adapted sugggestions
+  * Patching nsswitch.conf only if it has not been generated by nsswitch-config (JIRA-#PED-13807).
+  * Avoid nasty exceptions running tput
+
+-------------------------------------------------------------------
+Tue Nov 11 09:27:26 UTC 2025 - Ruediger Oertel <ro@suse.com>
+
+- Update to version 84.87+git20251111.509a363:
+  * Avoid escape sequences on dump terminal of s390
+
+-------------------------------------------------------------------
+Tue Nov 11 08:00:26 UTC 2025 - Dominique Leuenberger <dimstar@opensuse.org>
+
+- Update to version 84.87+git20251111.16d9d43:
+  * Set XDG environment variables consistently without trailing slash
+
+-------------------------------------------------------------------
+Mon Nov 10 15:47:37 UTC 2025 - Ruediger Oertel <ro@suse.com>
+
+- Update to version 84.87+git20251110.af063e6:
+  * Avoid escape sequences on dump terminal of s390
+  * Set erase character from kbs entry of terminfo
+
+-------------------------------------------------------------------
+Thu Oct 30 13:29:10 UTC 2025 - Thorsten Kukuk <kukuk@suse.com>
+
+- Update to version 84.87+git20251030.441f926:
+  * Add systemd to /etc/nsswitch.conf [bsc#1250513]
+  * Add group-directories-first option
+  * prevent normal users from accessing dmesg (bsc#1249686)
+  * Use explicit defaults for XDG environment variables
+
+-------------------------------------------------------------------
+Wed Sep 03 12:23:39 UTC 2025 - Ruediger Oertel <ro@suse.com>
+
+- Update to version 84.87+git20250903.33e5ba4:
+  * Correct fix for boo#1247495 (boo#1248158)
+
+-------------------------------------------------------------------
+Tue Aug 05 15:28:33 UTC 2025 - Ruediger Oertel <ro@suse.com>
+
+- Update to version 84.87+git20250805.3069494:
+  * Remove initviocons for tcsh as well and
+  * Update csh.login
+  * Add missing quoting and remove unneeded uses of eval
+
+-------------------------------------------------------------------
+Fri Aug 01 09:04:06 UTC 2025 - Thorsten Kukuk <kukuk@suse.com>
+
+- Update to version 84.87+git20250801.f305627:
+  * Remove sysconfig.language [bsc#1247286]
+
+-------------------------------------------------------------------
+Fri Aug 01 08:53:32 UTC 2025 - Thorsten Kukuk <kukuk@suse.com>
+
+- Update to version 84.87+git20250801.b2fa3fe:
+  * Allow /etc/locale.conf to have no newline
+
+-------------------------------------------------------------------
+Tue Apr 29 16:08:04 UTC 2025 - Ruediger Oertel <ro@suse.com>
+
+- Update to version 84.87+git20250429.1cad3bc:
+  * Remove alias "you" (boo#1242011)
+
+-------------------------------------------------------------------
+Fri Apr 25 08:08:49 UTC 2025 - Dominique Leuenberger <dimstar@opensuse.org>
+
+- Update to version 84.87+git20250425.1664836:
+  * Fix bug boo#1241205 by adding missed endif
+  * alias.bash: future-proof egrep/fgrep color aliases
+
+-------------------------------------------------------------------
+Thu Apr 10 12:35:44 UTC 2025 - Ruediger Oertel <ro@suse.com>
+
+- Update to version 84.87+git20250410.71df276:
+  * Modern s390x uses TERM=linux for ttysclp<X>
+
+-------------------------------------------------------------------
+Thu Mar 13 15:37:47 UTC 2025 - ro@suse.com
+
+- Update to version 84.87+git20250313.4dd1cfd:
+  * DIR_COLORS: add backup and temporary file extensions
+  * DIR_COLORS: sort audio formats
+  * DIR_COLORS: use cyan for audio formats instead of green
+  * DIR_COLORS: add 'avif' to image formats
+  * DIR_COLORS: add updated and sorted list of archive formats
+  * DIR_COLORS: don't colour DOS/Windows executables
+  * DIR_COLORS: update existing colours and add missing ones
+  * DIR_COLORS: add COLORTERM and 'st' terminal
+  * DIR_COLORS: update file description
+  * DIR_COLORS: sort TERM entries
+  * DIR_COLORS: remove COLOR, OPTIONS and EIGHTBIT
+
+-------------------------------------------------------------------
+Thu Mar 13 14:38:00 UTC 2025 - ro@suse.com
+
+- Update to version 84.87+git20250313.e71c2f4:
+  * Respect PROFILEREAD/CSHRCREAD at shell switch
+  * Modernize specfile
+  * Add safety quotes and proper escaping
+  * Avoid bashisms in build recipe
+  * Add setup-systemd-proxy-env
+  * profile.{sh,csh}: Drop useless proxy variables cleanup
+
+-------------------------------------------------------------------
+Thu Jan 02 15:03:01 UTC 2025 - dmueller@suse.com
+
+- Update to version 84.87+git20250102.c08e614:
+  * Load distrobox_profile.sh
+
 -------------------------------------------------------------------
 Fri Sep 06 09:04:40 UTC 2024 - dmueller@suse.com
 
@@ -1053,7 +1185,7 @@ Mon Jan 26 12:30:54 UTC 2015 - werner@suse.de
 - Merge pull request #21 from arvidjaar/bnc/907873
 
 -------------------------------------------------------------------
-Fri Dec 5 10:55:09 2014 UTC arvidjaar@gmail.com
+Fri Dec 5 10:55:09 UTC 2014 - arvidjaar@gmail.com
 
 - Avoid sourcing /etc/bash_completion.d twice
 

aaa_base.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package aaa_base
 #
-# Copyright (c) 2024 SUSE LLC
+# Copyright (c) 2026 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -33,7 +33,7 @@ BuildRequires:  git-core
 %endif
 
 Name:           aaa_base
-Version:        84.87+git20240906.742565b%{git_version}
+Version:        84.87+git20260210.ecce285%{git_version}
 Release:        0
 Summary:        openSUSE Base Package
 License:        GPL-2.0-or-later
@@ -104,7 +104,7 @@ for Linux. It should only be installed on WSL and not on regular Linux
 systems.
 
 %package yama-enable-ptrace
-Summary:        sysctl setting to allow ptrace with the YAMA LSM enabled
+Summary:        Sysctl setting to allow ptrace with the YAMA LSM enabled
 Group:          System/Fhs
 Requires:       %{name} = %{version}
 
@@ -116,7 +116,7 @@ this package contains a setting that allows ptrace again.
 See https://docs.kernel.org/admin-guide/LSM/Yama.html
 
 %prep
-%setup -q
+%autosetup -p1
 
 %build
 %make_build CFLAGS="%{optflags}" CC="%{__cc}"
@@ -136,20 +136,20 @@ done
 touch %buildroot/etc/inittab
 
 # Backup directories
-install -d -m 755 %{buildroot}/var/adm/backup/{rpmdb,sysconfig}
+install -d -m 755 %{buildroot}/var/adm/backup/rpmdb %{buildroot}/var/adm/backup/sysconfig
 
 mkdir -p %{buildroot}%{_fillupdir}
 %if "%{_fillupdir}" != "/var/adm/fillup-templates"
   for f in %{buildroot}/var/adm/fillup-templates/* ; do
     test -e "$f" || continue
-    mv $f %{buildroot}%{_fillupdir}/
+    mv "$f" "%{buildroot}/%{_fillupdir}/"
   done
   rm -vrf %{buildroot}/var/adm/fillup-templates
 %endif
 %if "%{_fillupdir}" != "/usr/share/fillup-templates"
   for f in %{buildroot}/usr/share/fillup-templates/* ; do
     test -e "$f" || continue
-    mv $f %{buildroot}%{_fillupdir}/
+    mv "$f" "%{buildroot}/%{_fillupdir}/"
   done
   rm -vrf %{buildroot}/usr/share/fillup-templates
 %endif
@@ -163,35 +163,48 @@ mkdir -p %{buildroot}%{_fillupdir}
 %post
 export LC_ALL=C
 
-#XXX Fix /etc/nsswitch.conf to include usrfiles [bsc#1162916]
 if [ -e /etc/nsswitch.conf ]; then
-    for key in services protocols rpc ; do
-	if ! grep -q ^${key}.*usrfiles /etc/nsswitch.conf ; then
-	    cp /etc/nsswitch.conf /etc/nsswitch.conf.pre-usrfiles.${key}
-	    sed -i -e "s|^\(${key}:.*[[:space:]]\)files\([[:space:]].*\)*$|\1files usrfiles\2|" /etc/nsswitch.conf
-	fi
-    done
+   if [ ! -f /bin/nsswitch-config ] ||
+      ! /bin/nsswitch-config --is_generated >/dev/null 2>&1; then
+        # /etc/nsswitch.conf has not been generated by nsswitch-config.
+        # So it has to be patched manually
+        #XXX Fix /etc/nsswitch.conf to include usrfiles [bsc#1162916]
+        for key in services protocols rpc ; do
+            if ! grep -q "^${key}:.*usrfiles" /etc/nsswitch.conf ; then
+                cp /etc/nsswitch.conf "/etc/nsswitch.conf.pre-usrfiles.${key}"
+                sed -i -e "s|^\(${key}:.*[[:space:]]\)files\([[:space:]].*\)*\$|\1files usrfiles\2|" /etc/nsswitch.conf
+            fi
+        done
+        # Fix /etc/nsswitch.conf to include systemd [bsc#1250513]
+        for key in passwd group shadow ; do
+            if ! grep -q "^${key}:.*systemd" /etc/nsswitch.conf ; then
+                cp /etc/nsswitch.conf "/etc/nsswitch.conf.pre-systemd.${key}"
+                sed -i "/^${key}:/ s/$/ systemd/" /etc/nsswitch.conf
+            fi
+        done
+    fi
 fi
 
-%{fillup_only -n language}
 %{fillup_only -n proxy}
+%tmpfiles_create soft-reboot-cleanup.conf
 %service_add_post soft-reboot-cleanup.service
 
 %postun
 %service_del_postun_without_restart soft-reboot-cleanup.service
 
 %pre extras
-%service_add_pre backup-rpmdb.service backup-rpmdb.timer backup-sysconfig.service backup-sysconfig.timer check-battery.service check-battery.timer
+%service_add_pre backup-rpmdb.service backup-rpmdb.timer backup-sysconfig.service backup-sysconfig.timer check-battery.service check-battery.timer setup-systemd-proxy-env.path setup-systemd-proxy-env.service
 
 %post extras
 %fillup_only -n backup
-%service_add_post backup-rpmdb.service backup-rpmdb.timer backup-sysconfig.service backup-sysconfig.timer check-battery.service check-battery.timer
+%tmpfiles_create adm-backup.conf
+%service_add_post backup-rpmdb.service backup-rpmdb.timer backup-sysconfig.service backup-sysconfig.timer check-battery.service check-battery.timer setup-systemd-proxy-env.path setup-systemd-proxy-env.service
 
 %preun extras
-%service_del_preun backup-rpmdb.service backup-rpmdb.timer backup-sysconfig.service backup-sysconfig.timer check-battery.service check-battery.timer
+%service_del_preun backup-rpmdb.service backup-rpmdb.timer backup-sysconfig.service backup-sysconfig.timer check-battery.service check-battery.timer setup-systemd-proxy-env.path setup-systemd-proxy-env.service
 
 %postun extras
-%service_del_postun backup-rpmdb.service backup-rpmdb.timer backup-sysconfig.service backup-sysconfig.timer check-battery.service check-battery.timer
+%service_del_postun backup-rpmdb.service backup-rpmdb.timer backup-sysconfig.service backup-sysconfig.timer check-battery.service check-battery.timer setup-systemd-proxy-env.path setup-systemd-proxy-env.service
 
 %post yama-enable-ptrace
 # check if yama is active
@@ -241,6 +254,9 @@ fi
 /usr/etc/profile.d/ls.zsh
 /usr/etc/profile.d/terminal.sh
 /usr/etc/profile.d/terminal.csh
+%dir /usr/etc/security/
+%dir /usr/etc/security/pam_env.conf.d/
+/usr/etc/security/pam_env.conf.d/xdg.conf
 %dir /usr/lib/environment.d
 /usr/lib/environment.d/50-xdg.conf
 /usr/lib/systemd/system/soft-reboot-cleanup.service
@@ -265,10 +281,10 @@ fi
 /usr/lib/sysctl.d/50-pid-max.conf
 %endif
 /usr/lib/sysctl.d/51-network.conf
-%{_fillupdir}/sysconfig.language
 %{_fillupdir}/sysconfig.proxy
 
 %files extras
+/usr/bin/setup-systemd-proxy-env
 /usr/etc/skel/.emacs
 /usr/etc/skel/.inputrc
 %dir /usr/lib/base-scripts
@@ -276,8 +292,10 @@ fi
 /usr/lib/base-scripts/backup-sysconfig
 /usr/lib/base-scripts/check-battery
 /usr/lib/systemd/system/[bc]*
-/var/adm/backup/rpmdb
-/var/adm/backup/sysconfig
+/usr/lib/systemd/system/setup-systemd-proxy-env.*
+%ghost %dir /var/adm/backup/rpmdb
+%ghost %dir /var/adm/backup/sysconfig
+%{_tmpfilesdir}/adm-backup.conf
 %{_fillupdir}/sysconfig.backup
 
 %files malloccheck