- Add gdk-pixbuf-CVE-2026-5201.patch: jpeg: Reject unsupported
  number of components (bsc#1261210 CVE-2026-5201
  glgo#GNOME/gdk-pixbuf#266).

- Add CVE-2026-33186.patch to fix authorization bypass in grpc-go due to improper
  validation of the HTTP/2 :path pseudo-header (bsc#1260265, CVE-2026-33186)

- Update to version 3.12 (bsc#1259816)
  * Collect WLM metric `saphanasr_angi_installed` for all OS types.
  * Failure handling: Remove attached disks from CG
  * OTE Status checks for Parameter Manager (SAP Agent)
  * Log command-line arguments in configureinstance.
  * Minor multiple reliability checks and fixes
  * Support custom names for restored disks in hanadiskrestore
  * Add newAttachedDisks to Restorer and detach them on restore failure.
  * Improve unit test coverage for hanadiskbackup and hanadiskrestore
  * Add support for refresh point tests.
  * Refactor HANA disk backup user validation and physical path parsing.
  * Auto updated compiled protocol buffers
  * Parameter Manager integration to SAP Agent
  * Modify collection logic for SAP HANA configuration files.
  * Update workloadagentplatform version and hash.
  * Auto updated compiled protocol buffers
  * Update WLM Validation metrics to support SAPHanaSR-angi setups.
  * Increment agent version to 3.12.
  * SAP HANA Pacemaker failover settings can come from `SAPHanaController`.
  * Update collection for WLM metric `ha_sr_hook_configured`.
  * Refactor CheckTopology to accept instance number.
  * Use constant backoff with max retries for snapshot group operations.
  * Update workloadagentplatform dependency
- Bump Go ABI version to 1.25 in BuildRequires

n/a

- bsc#1260414 - CVE-2026-33554:
  freeipmi: improper memory handling and data validation can lead
  A ipmi-oem-fix-several-memory-out-of-bounds-errors.patch

- (bsc#1260984) L3: aws-vpc-move-ip: Add awscli_timeout option
  Add upstream patch:
    0001-aws-vpc-move-ip-Add-awscli_timeout-option-2140.patch

- update package version of saptune to 3.2.3
  * On Azure cloud systems fix a systemd ordering cycle conflict
    which prevents saptune to run on boot.
    The reason for this conflict is an upcoming cloud-init update
    which will change the order by adding 'After=multi-user.target'
    to the cloud-final.service. Since version 3.1.5 saptune has
    a dependency to cloud-final.service on Azure systems to fix
    bsc#1235824. We will now remove this dependency.
    For detailed information see
    TID 000022490 - Important saptune update to 3.2.3 required on
    Azure due to cloud-init update
    (bsc#1260498, jsc#SAPSOL-1050)
  * Fix systemd service state revert problem.
    (bsc#1259748)
  * Fix output of 'saptune verify applied' in case of enabled
    notes, but nothing is applied.
    (jsc#SAPSOL-1051)
  * Add new tag 'kernel' to match the running kernel release.
    Valid values are extended regular expressions (RE2) that match
    the output of 'uname -r'
    (jsc#SAPSOL-810)
  * Support C-State names for parameter 'force_latency' additional
    to the already available latency value.
    (jsc#SAPSOL-806)
  * Support optional packages in the rpm section.
    Packages with a ? prefix are treated as optional.
    (jsc#SAPSOL-791)
  * Warn about duplicate Notes/Solutions.
    If a custom Note or Solution has the same name as a shipped
    Note or Solution a WARNING is displayed and logged.
    In the 'list' commands these entries are marked with a leading
    '!' and the line is highlighted with yellow color.
    In this case the shipped Note or Solution will take precedence
    over the custom Note or Solution.
    (jsc#SAPSOL-948)
  * Fix kernel regex for HotFix000022286.
    (bsc#1261866)
  * Add condition (kernel tag) to HotFix000022286.
    As the final kernel patch is available for the problem the
    HotFix will only be active on systems currently not patched to
    the latest kernel patch.
  * SLE12/15/16 - deprecate Note 941735
    The Note might get removed in a future saptune version.
    (jsc#SAPSOL-1048)
  * SAP Note 2684254 updated to Version 27
    check that TSX is set to auto on systems running dedicated
    kernel releases.
    (jsc#SAPSOL-793)
  * SAP Note 1656250 updated to Version 71
    disable C-states higher than C1
  * SAP Note 2578899 updated to Version 55
    check for optional sssd package version
  * SAP Note 1275776 updated to Version 47
  * SLE 16 SAP Note 3577842 and 3565382 updated
- use versioned Provides/Obsoletes for sapconf
- use full path for commands used in pre/post scripts
- requires systemd-presets-branding-SLE-SAP
  (jsc#PED-15405)

- update package version of saptune to 3.2.2 - HOTFIX
  * ship Note HotFix000022286 and add it to the Solutions 'HANA',
    'NETWEAVER+HANA', 'S4HANA-APP+DB' and 'S4HANA-DBSERVER'.
    This HotFix addresses a problem described in the TID 22286
    https://support.scc.suse.com/s/kb/SAP-HANA-swap-and-system-hangs-with-THP-on-multi-NUMA-node-systems?language=en_US
    To activate the fix you can simply apply the Note by
    'saptune note apply HotFix000022286', which will not
    interrupt your current tuning but add the 2 additional needed
    settings.
    Or you restart the saptune.service, which will lead to a short
    gap in your tuning because of the 'revert'/'apply' workflow of
    the service restart.
    Or you reboot your server.
    This HotFix is only available for SLES15SP5 to SLES15SP7 on
    x86_64 architecture.