Actual change was in commit b67947a321
and this .changes entry helps the security team with bug tracking
(We fixed it accidentally, also we did not notice the bug report at
first because it got assigned directly to yast-internal, not
yast2-maintainers)