- update to 2.67:

* Replace use of fgrep with grep -F (POSIX grep flags preferred by
    GNU grep) - patch from David Seifert.
  * Added SPDX identifiers to License file(s). Hopefully this will
    help the various robots out there correctly identify the
    longstanding licenses for libcap and friends. (Bug: 216609
    reported by Günther Noack)
  * Started down the rabbit hole of trying to address (Bug: 216610
    reported by Günther Noack on behalf of Michael Stapelberg)
  * The basic issue is how to link C code with Go psx without using
    CGo. This is all a low level hackery. If you are interested,
    browse the source.
  * Correct for bad whatis entries in man pages (this was throwing a
    Debian build test, detail)
  * Also reviewed man pages and addressed cross linkage issues (Bug:
  * Cleaned up some README.md files (made a github mirror now just so
    I can automatically render them).
  * Changed meaning of DYNAMIC=no builds.
    This now builds everything with static linking except for libc.
    The reason for this exception is explained in the commit message.
  * Inserted demonstration exploit code in capso.so to support
    article.
  * Minor clarification to cap_get_pid() man page concerning pid
    value within namespaces.

OBS-URL: https://build.opensuse.org/package/show/Base:System/libcap?expand=0&rev=75

libcap-2.66.tar.sign

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCAAdFiEEOKZEaYxpeHNE6VTOKe6EiuLM8/QFAmMvfigACgkQKe6EiuLM
-8/TcQg//VIYnSov6YhptNw94luAEva+Nij1qK46H8aGQjNkKBp3m4tl11gc2B7UW
-qVq/eH+UqZFtrdc7yUvAg+pGhZGzXDpDTXnAhsI/PhDnAAvay7rNoRn1WEpUMMz3
-S7ov7+YIwfuuX1pJB1adtkmlT1Uvm8mUOA7YLgviWpnV0x2PMA1E89x/luAP1NLe
-bHsXeN96Al13nFIDCnEJq/Lzp0haFlP+RxxHkvko0CNNR5lAfzFuh68BIt38s4DY
-YaJguUVWCDN2bz3PKadK+9QacaShoxspzsh5JQMtQiWfXDo16DNI8C8DUZK4rofi
-RCOqiAKxATPc+lIQlBzNc/IwQHxsJMEL9BcE6faU/wZLFsnsPg03g9uIT4iz6sTr
-2h1hix/O/MCc2oMlDiQSSMuAOGY1SRBtp4vKW94SJS4a6PBbd/25+OzKiONgHyq8
-OG/MT82ReR6t0crlgN0GbUS3eGSRs1z3gmalYBBKVO8bDbnLqBifrsNSjRqc4SXk
-fyF41ZdmK/NGJ+QRRDFtnCxiQDn1LyDP7vhCsFKGMlfBjv7ZtuLpTqzN3mSUMFAL
-km31dDGuZxUK1rx2PGox5f2Y4gXl2M0qxj0Nah9deQvRrNt6yq3x0adqDFPHheO1
-5V611tz64y+shK+UWMYEfLU87eeNvMN19wbGvrHWRN/2mPVBG5M=
-=XEJg
------END PGP SIGNATURE-----

libcap-2.66.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:15c40ededb3003d70a283fe587a36b7d19c8b3b554e33f86129c059a4bb466b2
-size 181592

libcap-2.67.tar.sign

@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=sGm0
+-----END PGP SIGNATURE-----

libcap-2.67.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:ce9b22fdc271beb6dae7543da5f74cf24cb82e6848cfd088a5a069dec5ea5198
+size 186864

libcap.changes

@@ -1,3 +1,29 @@
+-------------------------------------------------------------------
+Sat Feb  4 18:39:55 UTC 2023 - Dirk Müller <dmueller@suse.com>
+
+- update to 2.67:
+  * Replace use of fgrep with grep -F (POSIX grep flags preferred by
+    GNU grep) - patch from David Seifert.
+  * Added SPDX identifiers to License file(s). Hopefully this will
+    help the various robots out there correctly identify the
+    longstanding licenses for libcap and friends. (Bug: 216609
+    reported by Günther Noack)
+  * Started down the rabbit hole of trying to address (Bug: 216610
+    reported by Günther Noack on behalf of Michael Stapelberg)
+  * The basic issue is how to link C code with Go psx without using
+    CGo. This is all a low level hackery. If you are interested,
+    browse the source.
+  * Correct for bad whatis entries in man pages (this was throwing a
+    Debian build test, detail)
+  * Also reviewed man pages and addressed cross linkage issues (Bug:
+  * Cleaned up some README.md files (made a github mirror now just so
+    I can automatically render them).
+  * Changed meaning of DYNAMIC=no builds.
+    This now builds everything with static linking except for libc.
+    The reason for this exception is explained in the commit message.
+  * Inserted demonstration exploit code in capso.so to support
+    article.
+
 -------------------------------------------------------------------
 Thu Sep 29 19:49:37 UTC 2022 - Dirk Müller <dmueller@suse.com>
 
@@ -36,7 +62,8 @@ Tue Apr 12 19:46:17 UTC 2022 - Dirk Müller <dmueller@suse.com>
   * Fix memory leak in libpsx at program exit.
   * Be more resilient to CGo configuration with Go compiler when building tests.
   * Fix cap_*prctl() return code/errno handling.
-  * Minor clarification to cap_get_pid() man page concerning pid value within namespaces.
+  * Minor clarification to cap_get_pid() man page concerning pid
+    value within namespaces.
 
 -------------------------------------------------------------------
 Fri Feb 25 09:05:58 UTC 2022 - Marcus Meissner <meissner@suse.com>

libcap.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package libcap
 #
-# Copyright (c) 2022 SUSE LLC
+# Copyright (c) 2023 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,16 +17,16 @@
 
 
 Name:           libcap
-Version:        2.66
+Version:        2.67
 Release:        0
 Summary:        Library for Capabilities (linux-privs) Support
 License:        BSD-3-Clause OR GPL-2.0-only
 Group:          Development/Libraries/C and C++
 URL:            https://sites.google.com/site/fullycapable/
 Source:         https://www.kernel.org/pub/linux/libs/security/linux-privs/libcap2/libcap-%{version}.tar.xz
-Source2:        baselibs.conf
+Source1:        https://www.kernel.org/pub/linux/libs/security/linux-privs/libcap2/libcap-%{version}.tar.sign
-Source3:        https://www.kernel.org/pub/linux/libs/security/linux-privs/libcap2/libcap-%{version}.tar.sign
+Source2:        https://git.kernel.org/pub/scm/linux/kernel/git/morgan/libcap.git/plain/pgp.keys.asc#/%{name}.keyring
-Source4:        https://git.kernel.org/pub/scm/linux/kernel/git/morgan/libcap.git/plain/pgp.keys.asc#/%{name}.keyring
+Source3:        baselibs.conf
 BuildRequires:  fdupes
 BuildRequires:  glibc-devel-static
 BuildRequires:  pkgconfig